achernya
Joined 14 years ago
Joined 14 years ago
(work at Google, and on the CDN)
[1] https://github.com/DavidSchinazi/draft-cms-masque-connect-ip...
We're working on standardizing "IP Proxying" over QUIC as part of the MASQUE working group at IETF. So far, we've adopted a requirements document [1] and have started work on an implementation [2].
[0] https://quiche.googlesource.com/quiche/+/refs/heads/master/q...
[1] https://tools.ietf.org/html/draft-ietf-masque-ip-proxy-reqs-...
[2] https://tools.ietf.org/html/draft-cms-masque-connect-ip-00
Unfortunately, IPv6 deployment is still below 20% (as measured by Google, https://www.google.com/intl/en/ipv6/statistics.html) so a publically-accessible IPv6 address is not yet sufficient.
That is to say, you're correct that server configured for a 100% on SSLLabs will not support HTTP/2, but I agree with davidben that SSLLabs is incorrect here for incetivising AES-256, particularly in CBC mode, for the 100% score.
While it's true that helpdesk at IS&T was all sorts of wonderful prior to the transformation, that particular example wasn't handled by them, but rather by the student volunteers running Scripts (scripts.mit.edu), part of SIPB (sipb.mit.edu). SIPB does get its funding from IS&T, and worked pretty closely with many people there on initiatives ranging from the Scripts platform to the whole Athena operating system.
I don't know if the "fast and free infrastructure" and "friendly tech support" will continue, as it requires the new IS&T to continue supporting the student volunteers.
[1] https://github.com/google/oss-fuzz/tree/master/projects/mosh