Comment by georgyo

I always considere NTLM and Kerberos to be very similar, so I am surprised to hear that NTLM is broken.

Kerberos and HTTP/2 work just fine together.

What in particular is broken with NTLM?