ok2c commented on PR #686: URL: https://github.com/apache/httpcomponents-core/pull/686#issuecomment-5166340199
> I added some Javadoc and left the test disabled. I'm not sure this PR should untangle weak vs. prohibited. I am concerned that adding RFC10015 "deprecated" (but not "discouraged") to our H2 blacklist (prohibited list) will blow up too many existing clients. @garydgregory My proposal was different. We should not mess with the H2 blacklist given it is a part of the protocol specification, but we could make sure all its ciphers are also in the "weak" list. Having said that I personally do not see a contradiction with some ciphers being in H2 blacklist and not being in "weak" list, so I do not see any value in adding a disabled test _unless_ you personally would invest time into it and enabling the test. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
