HTTP/2's opportunistic encryption of http URIs using TLS appears to allow the possibility of man-in-the-middle attacks. Is that true?

RFC for opportunistic encryption.

Here's HTTP/2's spec for opportunistic encryption.

1 Answer 1


Opportunistic encryption assumes only a passive attacker (i.e. sniffing only) and thus of course makes man-in-the-middle attacks by an active attacker (which can modify the connection) possible. This is not restricted to HTTP/2 but a general limitation of opportunistic encryption. See also Wikipedia about this topic.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .