附录 (Appendices)

附录A. 禁止的TLS 1.2密码套件 (Prohibited TLS 1.2 Cipher Suites)

HTTP/2实现可以将与TLS 1.2协商以下任何密码套件视为INADEQUATE_SECURITY类型的连接错误（第5.4.1节）：

• 设置中的限制不能立即减少，这使端点暴露于可能超出新限制的对等方行为。特别是，在建立连接后立即，服务器设置的限制对客户端是未知的，可能在不是明显的协议违规的情况下被超出
• TLS_NULL_WITH_NULL_NULL
• TLS_RSA_WITH_NULL_MD5
• TLS_RSA_WITH_NULL_SHA
• TLS_RSA_EXPORT_WITH_RC4_40_MD5
• TLS_RSA_WITH_RC4_128_MD5
• TLS_RSA_WITH_RC4_128_SHA
• TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
• TLS_RSA_WITH_IDEA_CBC_SHA
• TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_WITH_DES_CBC_SHA
• TLS_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_DSS_WITH_DES_CBC_SHA
• TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
• TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_RSA_WITH_DES_CBC_SHA
• TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_DSS_WITH_DES_CBC_SHA
• TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
• TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_RSA_WITH_DES_CBC_SHA
• TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
• TLS_DH_anon_WITH_RC4_128_MD5
• TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_anon_WITH_DES_CBC_SHA
• TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
• TLS_KRB5_WITH_DES_CBC_SHA
• TLS_KRB5_WITH_3DES_EDE_CBC_SHA
• TLS_KRB5_WITH_RC4_128_SHA
• TLS_KRB5_WITH_IDEA_CBC_SHA
• TLS_KRB5_WITH_DES_CBC_MD5
• TLS_KRB5_WITH_3DES_EDE_CBC_MD5
• TLS_KRB5_WITH_RC4_128_MD5
• TLS_KRB5_WITH_IDEA_CBC_MD5
• TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
• TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA
• TLS_KRB5_EXPORT_WITH_RC4_40_SHA
• TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
• TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5
• TLS_KRB5_EXPORT_WITH_RC4_40_MD5
• TLS_PSK_WITH_NULL_SHA
• TLS_DHE_PSK_WITH_NULL_SHA
• TLS_RSA_PSK_WITH_NULL_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_DH_DSS_WITH_AES_128_CBC_SHA
• TLS_DH_RSA_WITH_AES_128_CBC_SHA
• TLS_DHE_DSS_WITH_AES_128_CBC_SHA
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA
• TLS_DH_anon_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_DH_DSS_WITH_AES_256_CBC_SHA
• TLS_DH_RSA_WITH_AES_256_CBC_SHA
• TLS_DHE_DSS_WITH_AES_256_CBC_SHA
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA
• TLS_DH_anon_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_NULL_SHA256
• TLS_RSA_WITH_AES_128_CBC_SHA256
• TLS_RSA_WITH_AES_256_CBC_SHA256
• TLS_DH_DSS_WITH_AES_128_CBC_SHA256
• TLS_DH_RSA_WITH_AES_128_CBC_SHA256
• TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
• TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
• TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
• TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
• TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
• TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
• TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_DH_DSS_WITH_AES_256_CBC_SHA256
• TLS_DH_RSA_WITH_AES_256_CBC_SHA256
• TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
• TLS_DH_anon_WITH_AES_128_CBC_SHA256
• TLS_DH_anon_WITH_AES_256_CBC_SHA256
• TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
• TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
• TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
• TLS_PSK_WITH_RC4_128_SHA
• TLS_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_PSK_WITH_AES_128_CBC_SHA
• TLS_PSK_WITH_AES_256_CBC_SHA
• TLS_DHE_PSK_WITH_RC4_128_SHA
• TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_DHE_PSK_WITH_AES_128_CBC_SHA
• TLS_DHE_PSK_WITH_AES_256_CBC_SHA
• TLS_RSA_PSK_WITH_RC4_128_SHA
• TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_RSA_PSK_WITH_AES_128_CBC_SHA
• TLS_RSA_PSK_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_SEED_CBC_SHA
• TLS_DH_DSS_WITH_SEED_CBC_SHA
• TLS_DH_RSA_WITH_SEED_CBC_SHA
• TLS_DHE_DSS_WITH_SEED_CBC_SHA
• TLS_DHE_RSA_WITH_SEED_CBC_SHA
• TLS_DH_anon_WITH_SEED_CBC_SHA
• TLS_RSA_WITH_AES_128_GCM_SHA256
• TLS_RSA_WITH_AES_256_GCM_SHA384
• TLS_DH_RSA_WITH_AES_128_GCM_SHA256
• TLS_DH_RSA_WITH_AES_256_GCM_SHA384
• TLS_DH_DSS_WITH_AES_128_GCM_SHA256
• TLS_DH_DSS_WITH_AES_256_GCM_SHA384
• TLS_DH_anon_WITH_AES_128_GCM_SHA256
• TLS_DH_anon_WITH_AES_256_GCM_SHA384
• TLS_PSK_WITH_AES_128_GCM_SHA256
• TLS_PSK_WITH_AES_256_GCM_SHA384
• TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
• TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
• TLS_PSK_WITH_AES_128_CBC_SHA256
• TLS_PSK_WITH_AES_256_CBC_SHA384
• TLS_PSK_WITH_NULL_SHA256
• TLS_PSK_WITH_NULL_SHA384
• TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
• TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
• TLS_DHE_PSK_WITH_NULL_SHA256
• TLS_DHE_PSK_WITH_NULL_SHA384
• TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
• TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
• TLS_RSA_PSK_WITH_NULL_SHA256
• TLS_RSA_PSK_WITH_NULL_SHA384
• TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
• TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
• TLS_EMPTY_RENEGOTIATION_INFO_SCSV
• TLS_ECDH_ECDSA_WITH_NULL_SHA
• TLS_ECDH_ECDSA_WITH_RC4_128_SHA
• TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
• TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_NULL_SHA
• TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
• TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
• TLS_ECDH_RSA_WITH_NULL_SHA
• TLS_ECDH_RSA_WITH_RC4_128_SHA
• TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_NULL_SHA
• TLS_ECDHE_RSA_WITH_RC4_128_SHA
• TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDH_anon_WITH_NULL_SHA
• TLS_ECDH_anon_WITH_RC4_128_SHA
• TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
• TLS_ECDH_anon_WITH_AES_128_CBC_SHA
• TLS_ECDH_anon_WITH_AES_256_CBC_SHA
• TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA
• TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
• TLS_SRP_SHA_WITH_AES_128_CBC_SHA
• TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
• TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
• TLS_SRP_SHA_WITH_AES_256_CBC_SHA
• TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
• TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
• TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
• TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
• TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
• TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_PSK_WITH_RC4_128_SHA
• TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
• TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
• TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_PSK_WITH_NULL_SHA
• TLS_ECDHE_PSK_WITH_NULL_SHA256
• TLS_ECDHE_PSK_WITH_NULL_SHA384
• TLS_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256
• TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384
• TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256
• TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384
• TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_DH_anon_WITH_ARIA_128_CBC_SHA256
• TLS_DH_anon_WITH_ARIA_256_CBC_SHA384
• TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_RSA_WITH_ARIA_128_GCM_SHA256
• TLS_RSA_WITH_ARIA_256_GCM_SHA384
• TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256
• TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384
• TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256
• TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384
• TLS_DH_anon_WITH_ARIA_128_GCM_SHA256
• TLS_DH_anon_WITH_ARIA_256_GCM_SHA384
• TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256
• TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384
• TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256
• TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384
• TLS_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_PSK_WITH_ARIA_128_GCM_SHA256
• TLS_PSK_WITH_ARIA_256_GCM_SHA384
• TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256
• TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384
• TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
• TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
• TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
• TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
• TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
• TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
• TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
• TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
• TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_RSA_WITH_AES_128_CCM
• TLS_RSA_WITH_AES_256_CCM
• TLS_RSA_WITH_AES_128_CCM_8
• TLS_RSA_WITH_AES_256_CCM_8
• TLS_PSK_WITH_AES_128_CCM
• TLS_PSK_WITH_AES_256_CCM
• TLS_PSK_WITH_AES_128_CCM_8
• TLS_PSK_WITH_AES_256_CCM_8

有关更多详细信息，请参见第9.2.2节。

附录B. 相对于RFC 7540的变更 (Changes from RFC 7540)

本修订版包括以下实质性变更：

• 基于[RFC8740]定义了TLS 1.3的使用，本文档废弃了该RFC
• RFC 7540中定义的优先级方案已被弃用。保留了PRIORITY帧格式和HEADERS帧中优先级字段的定义，以及控制何时可以发送和接收PRIORITY帧的规则，但这些字段的语义仅在RFC 7540中描述。RFC 7540中的优先级信令方案并不成功。建议使用[HTTP-PRIORITY]中更简单的信令
• HTTP/1.1 Upgrade机制已被弃用，本文档中不再指定。它从未被广泛部署，明文HTTP/2用户选择使用先验知识实现
• 字段名称和值的验证已收窄。中间节点必须执行的验证已精确定义，并且已修改请求的错误报告以鼓励发送400系列状态码
• 为实验性使用保留的设置和帧类型的代码点范围现在可用于一般使用
• 禁止的连接特定头部字段已被更精确和全面地识别
• Host和":authority"不再允许不一致
• 第4.3.1节中已澄清了在设置更改后发送动态表大小更新指令的规则

还包括编辑性更改。特别是，术语和文档结构的更改是响应核心HTTP语义[HTTP]的更新。这些文档现在包括一些首先在RFC 7540中定义的概念，例如421状态码或连接合并。

致谢 (Acknowledgments)

本文档的非平凡输入归功于多年来为HTTP工作组做出贡献的大量人员。[RFC7540]包含了更广泛的值得为其贡献表示感谢的人员名单。

贡献者 (Contributors)

Mike Belshe和Roberto Peon撰写了本文档所基于的文本。

作者地址 (Authors' Addresses)

Martin Thomson (编辑)
Mozilla
Australia
Email: [email protected]

Cory Benfield (编辑)
Apple Inc.
Email: [email protected]