Viewing profile — mbelshe

Kinda makes you wish the IETF had adopted all-TLS-all-the-time in HTTP/2.0. We need HTTP/3.0 to be SSL all the time and nix the CAs so we can avoid MITM from VZ.

As soon as Microsoft embeds SCTP in every Windows device, we might be able to start discussing this...

Standardization is a critical step. It verifies that we use open IP which is available to everyone, provides a open forum for discussion, and archives the protocol in a way all ven…

BTW - TCP & SSL maintain connection level state too. This isn't anything new to SPDY and is transparent to the application above.

The biggest difference between SPDY and Microsoft's proposal is that Microsoft's proposal is only theory at this point. The SPDY proposal has dozens of independent implementations …

Changing the transport requires patching the kernels of billions of installed devices. SCTP is not available on Windows, Mac, or any popular mobile device I know of.

The Opera guys posted this today, and the author didn't understand the nature of stateful compression. SPDY is getting well over 85% compression in the real world across millions o…

If you want 100% support; just wait for the IETF to finish HTTP/2.0. It may not be the exact SPDY protocol, but it will most likely support a reasonable form of multiplexing, and I…

We removed the alternate-protocol stuff only because we thought it needed more work. It is implemented in chrome, so you can try it, but we're still considering how we'll deal with…

You can see this for yourself - run the test referenced in Rob's post above. IE9, right now, reports a 13-14x slowdown on that test with trivial changes.

There were multiple issues. There was a straight up bug, which was fixed. But the perf delta remains.

Sorry to surprise you, Maciej. As others on this thread have already have already surmised, we were not trying to change (or fork) SunSpider. We just wanted to demonstrate the impa…

The great thing and the worst thing about benchmarks is that vendors optimize to them :-) IE9 claims speed, but the only benchmark it performs better than other browsers on is the …

That's basically what SPDY is. It has two halves, a framing layer (which is generic), and a definition of how to embed HTTP within that framing layer. In theory, you could use the …

No, this is pure conspiracy theory. :-) The decision to drop " http:// from the display was a UI decision and had nothing to do with the internals. The idea is that the " http:// i…

Alright, but that is just theory. The reason you'd want a text protocol is so that humans could read it. Once you secure the protocol, you can't read it without a machine to help y…

Heh - I didn't think a server side SCTP implementation was very interesting if you don't have clients to use it.

Yes, its all open, and there are non-google SPDY servers out there already. My own site (you can probably find it) will speak SPDY for you. If you have any trouble, please hop on t…

Nobody questions that a secure protocol is not readable text :-) I fundamentally believe the protocol has to be server authenticated and encrypted always . We've seen breach after …

The reason we didn't like the Upgrade header is because it requires yet-another-round-trip in the protocol. Round trips are expensive, and getting worse both for desktops and mobil…

SCTP is not available on Windows by default, and you need administrative privileges to deploy it. I'm not trying to start an OS war debate, but this is a very practical problem. Mo…

SCTP is a good start for sure, and someday may make sense. The problem is a deployment one: it can't pass through NAT, making it off limits to most users today. As for solving prob…