sslsplit
sslsplit copied to clipboard
HTTP/2 (minimal)
Dependencies:
- #40 proxy core refactoring
- #210 Actively manage number of open file descriptors
- #215 PCAP logging
Tasks:
- [ ] Implement minimal subset of HTTP/2 protocol needed to proxy and log raw PCAP without any suppression mechanisms relying on removing or modifying headers
- [ ] Add option to downgrade HTTP/2 to HTTP/1.x as is the current SSLsplit behaviour
- [ ] Implement all upgrade paths to HTTP/2
- [ ] Add upgrade to HTTP/2 to connection log (does not include request logging of individual stream)
- [ ] Test on different platforms and with different browsers/clients
Out of scope:
- #219 Decoding binary HTTP/2 protocol, framing, header decompression, header suppression, individual stream logging (i.e. «HTTP request»)
- Support for predecessor protocols like SPDY
- Spec compliant stream priority handling
- Opportunistic Security for HTTP/2 (RFC 8164)
References:
- https://en.wikipedia.org/wiki/HTTP/2
- https://tools.ietf.org/html/rfc7540
- https://github.com/nghttp2/nghttp2
- https://github.com/phluid61/mk-hpack