jsr369-experts@servlet-spec.java.net

[jsr369-experts] Re: Question about TLS 1.2 Application-Layer Protocol Negotiation Extension

From: Mark Thomas <markt_at_apache.org>
Date: Tue, 09 Dec 2014 12:42:17 +0000

On 08/12/2014 20:44, Edward Burns wrote:
>>>>>> On Thu, 27 Nov 2014 13:49:03 +0900, Eugene Chung() <euigeun_chung_at_tmax.co.kr> said:
>
> EC> HTTP/2 requires ALPN extension(rfc7301) for HTTP/2 over TLS.
> EC> But Servlet 4.0(Java EE 8) will be based on Java SE 8, which is already
> EC> released.
>
> EC> Java SE 8, exactly JSSE in it, doesn't support ALPN extension.
> EC> I have been investigating but I couldn't find the way to use ALPN in a
> EC> standard fashion for container developers.
>
> EC> Is there any plan for this? (endorsed JSSE for Java SE 8?)
> EC> Or any other standard mechanism that I don't know?
>
> My plan of record is to leave this as an implementation detail. Yes, I
> know there is an ALPN client coming in Java SE 9, but we will be
> sticking with Java SE 8 as our base.

That is a pretty large implementation detail. Is there nothing we can do
here in terms of requesting a back-port of the ALPN client to Java 8?

It seems like a missed opportunity to require each container to figure
out a way to make this work for them on Java 8.

Mark