附录 (Appendices)

附录A. 禁止的 TLS 1.2 密码套件 (Prohibited TLS 1.2 Cipher Suites)

HTTP/2 实现 MAY 将通过 TLS 1.2 协商以下任一密码套件视为 INADEQUATE_SECURITY 类型的连接错误 (Section 5.4.1):

• TLS_NULL_WITH_NULL_NULL
• TLS_RSA_WITH_NULL_MD5
• TLS_RSA_WITH_NULL_SHA
• TLS_RSA_EXPORT_WITH_RC4_40_MD5
• TLS_RSA_WITH_RC4_128_MD5
• TLS_RSA_WITH_RC4_128_SHA
• TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
• TLS_RSA_WITH_IDEA_CBC_SHA
• TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_WITH_DES_CBC_SHA
• TLS_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_DSS_WITH_DES_CBC_SHA
• TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
• TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_RSA_WITH_DES_CBC_SHA
• TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_DSS_WITH_DES_CBC_SHA
• TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
• TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_RSA_WITH_DES_CBC_SHA
• TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
• TLS_DH_anon_WITH_RC4_128_MD5
• TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_anon_WITH_DES_CBC_SHA
• TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
• TLS_KRB5_WITH_DES_CBC_SHA
• TLS_KRB5_WITH_3DES_EDE_CBC_SHA
• TLS_KRB5_WITH_RC4_128_SHA
• TLS_KRB5_WITH_IDEA_CBC_SHA
• TLS_KRB5_WITH_DES_CBC_MD5
• TLS_KRB5_WITH_3DES_EDE_CBC_MD5
• TLS_KRB5_WITH_RC4_128_MD5
• TLS_KRB5_WITH_IDEA_CBC_MD5
• TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
• TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA
• TLS_KRB5_EXPORT_WITH_RC4_40_SHA
• TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
• TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5
• TLS_KRB5_EXPORT_WITH_RC4_40_MD5
• TLS_PSK_WITH_NULL_SHA
• TLS_DHE_PSK_WITH_NULL_SHA
• TLS_RSA_PSK_WITH_NULL_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_DH_DSS_WITH_AES_128_CBC_SHA
• TLS_DH_RSA_WITH_AES_128_CBC_SHA
• TLS_DHE_DSS_WITH_AES_128_CBC_SHA
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA
• TLS_DH_anon_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_DH_DSS_WITH_AES_256_CBC_SHA
• TLS_DH_RSA_WITH_AES_256_CBC_SHA
• TLS_DHE_DSS_WITH_AES_256_CBC_SHA
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA
• TLS_DH_anon_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_NULL_SHA256
• TLS_RSA_WITH_AES_128_CBC_SHA256
• TLS_RSA_WITH_AES_256_CBC_SHA256
• TLS_DH_DSS_WITH_AES_128_CBC_SHA256
• TLS_DH_RSA_WITH_AES_128_CBC_SHA256
• TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
• TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
• TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
• TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
• TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
• TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
• TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_DH_DSS_WITH_AES_256_CBC_SHA256
• TLS_DH_RSA_WITH_AES_256_CBC_SHA256
• TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
• TLS_DH_anon_WITH_AES_128_CBC_SHA256
• TLS_DH_anon_WITH_AES_256_CBC_SHA256
• TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
• TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
• TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
• TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
• TLS_PSK_WITH_RC4_128_SHA
• TLS_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_PSK_WITH_AES_128_CBC_SHA
• TLS_PSK_WITH_AES_256_CBC_SHA
• TLS_DHE_PSK_WITH_RC4_128_SHA
• TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_DHE_PSK_WITH_AES_128_CBC_SHA
• TLS_DHE_PSK_WITH_AES_256_CBC_SHA
• TLS_RSA_PSK_WITH_RC4_128_SHA
• TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_RSA_PSK_WITH_AES_128_CBC_SHA
• TLS_RSA_PSK_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_SEED_CBC_SHA
• TLS_DH_DSS_WITH_SEED_CBC_SHA
• TLS_DH_RSA_WITH_SEED_CBC_SHA
• TLS_DHE_DSS_WITH_SEED_CBC_SHA
• TLS_DHE_RSA_WITH_SEED_CBC_SHA
• TLS_DH_anon_WITH_SEED_CBC_SHA
• TLS_RSA_WITH_AES_128_GCM_SHA256
• TLS_RSA_WITH_AES_256_GCM_SHA384
• TLS_DH_RSA_WITH_AES_128_GCM_SHA256
• TLS_DH_RSA_WITH_AES_256_GCM_SHA384
• TLS_DH_DSS_WITH_AES_128_GCM_SHA256
• TLS_DH_DSS_WITH_AES_256_GCM_SHA384
• TLS_DH_anon_WITH_AES_128_GCM_SHA256
• TLS_DH_anon_WITH_AES_256_GCM_SHA384
• TLS_PSK_WITH_AES_128_GCM_SHA256
• TLS_PSK_WITH_AES_256_GCM_SHA384
• TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
• TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
• TLS_PSK_WITH_AES_128_CBC_SHA256
• TLS_PSK_WITH_AES_256_CBC_SHA384
• TLS_PSK_WITH_NULL_SHA256
• TLS_PSK_WITH_NULL_SHA384
• TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
• TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
• TLS_DHE_PSK_WITH_NULL_SHA256
• TLS_DHE_PSK_WITH_NULL_SHA384
• TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
• TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
• TLS_RSA_PSK_WITH_NULL_SHA256
• TLS_RSA_PSK_WITH_NULL_SHA384
• TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
• TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
• TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
• TLS_EMPTY_RENEGOTIATION_INFO_SCSV
• TLS_ECDH_ECDSA_WITH_NULL_SHA
• TLS_ECDH_ECDSA_WITH_RC4_128_SHA
• TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
• TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_NULL_SHA
• TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
• TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
• TLS_ECDH_RSA_WITH_NULL_SHA
• TLS_ECDH_RSA_WITH_RC4_128_SHA
• TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_NULL_SHA
• TLS_ECDHE_RSA_WITH_RC4_128_SHA
• TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDH_anon_WITH_NULL_SHA
• TLS_ECDH_anon_WITH_RC4_128_SHA
• TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
• TLS_ECDH_anon_WITH_AES_128_CBC_SHA
• TLS_ECDH_anon_WITH_AES_256_CBC_SHA
• TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA
• TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
• TLS_SRP_SHA_WITH_AES_128_CBC_SHA
• TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
• TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
• TLS_SRP_SHA_WITH_AES_256_CBC_SHA
• TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
• TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
• TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
• TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
• TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
• TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_PSK_WITH_RC4_128_SHA
• TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
• TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
• TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
• TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_PSK_WITH_NULL_SHA
• TLS_ECDHE_PSK_WITH_NULL_SHA256
• TLS_ECDHE_PSK_WITH_NULL_SHA384
• TLS_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256
• TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384
• TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256
• TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384
• TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_DH_anon_WITH_ARIA_128_CBC_SHA256
• TLS_DH_anon_WITH_ARIA_256_CBC_SHA384
• TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256
• TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384
• TLS_RSA_WITH_ARIA_128_GCM_SHA256
• TLS_RSA_WITH_ARIA_256_GCM_SHA384
• TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256
• TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384
• TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256
• TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384
• TLS_DH_anon_WITH_ARIA_128_GCM_SHA256
• TLS_DH_anon_WITH_ARIA_256_GCM_SHA384
• TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256
• TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384
• TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256
• TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384
• TLS_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_PSK_WITH_ARIA_128_GCM_SHA256
• TLS_PSK_WITH_ARIA_256_GCM_SHA384
• TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256
• TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384
• TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256
• TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384
• TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
• TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
• TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
• TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
• TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
• TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
• TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
• TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
• TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
• TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
• TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
• TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
• TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
• TLS_RSA_WITH_AES_128_CCM
• TLS_RSA_WITH_AES_256_CCM
• TLS_RSA_WITH_AES_128_CCM_8
• TLS_RSA_WITH_AES_256_CCM_8
• TLS_PSK_WITH_AES_128_CCM
• TLS_PSK_WITH_AES_256_CCM
• TLS_PSK_WITH_AES_128_CCM_8
• TLS_PSK_WITH_AES_256_CCM_8

注意: 此列表是根据制定 [RFC7540] 时已注册的 TLS 密码套件集合整理而成. 此列表包括不提供临时密钥交换的密码套件, 以及基于 TLS null、流密码或块密码类型的密码套件 (如 [TLS12] Section 6.2.3 所定义). 将来可能定义具有这些属性的其他密码套件; 这些套件不会被显式禁止.

更多细节见 Section 9.2.2.

附录B. 相对于 RFC 7540 的变更 (Changes from RFC 7540)

本修订版包括以下实质性变更:

• 基于 [RFC8740] 定义了 TLS 1.3 的使用, 本文档废弃该 RFC.
• RFC 7540 中定义的优先级方案已被弃用. 保留了 PRIORITY 帧格式和 HEADERS 帧中优先级字段的定义, 以及控制何时可以发送和接收 PRIORITY 帧的规则, 但这些字段的语义仅在 RFC 7540 中描述. RFC 7540 中的优先级信令方案并不成功. 建议使用 [HTTP-PRIORITY] 中更简单的信令.
• HTTP/1.1 Upgrade 机制已被弃用, 本文档中不再指定. 它从未被广泛部署, 明文 HTTP/2 用户选择使用先验知识实现.
• 字段名称和值的验证已收窄. 中间节点必须执行的验证已精确定义, 并且已修改请求的错误报告以鼓励发送 400 系列状态码.
• 为 Experimental Use 保留的设置和帧类型代码点范围现在可用于一般使用.
• 被禁止的连接特定头部字段已被更精确和全面地识别.
• Host 和 ":authority" 不再允许不一致.
• Section 4.3.1 已澄清在设置更改后发送 Dynamic Table Size Update 指令的规则.

还包括编辑性更改. 特别是, 术语和文档结构的更改是响应核心 HTTP 语义 [HTTP] 的更新. 这些文档现在包括一些首先在 RFC 7540 中定义的概念, 例如 421 状态码或连接合并.

致谢 (Acknowledgments)

本文档的非平凡输入归功于多年来为 HTTP 工作组做出贡献的大量人员. [RFC7540] 包含了更广泛的值得为其贡献表示感谢的人员名单.

贡献者 (Contributors)

Mike Belshe 和 Roberto Peon 撰写了本文档所基于的文本.

作者地址 (Authors' Addresses)

Martin Thomson (编辑)
Mozilla
Australia
Email: [email protected]

Cory Benfield (编辑)
Apple Inc.
Email: [email protected]