I know that a HTTPS connection provides:
- Authenticity: a website that I'm visiting is the real website that I intended to visit.
- Integrity: the data that is sent between the two endpoint is not altered
- Encryption: the data that is sent between the two endpoint is encrypted
The question: But what about TLS used in the HTTP/2 RFC? Does it mean the same? Could we finally ditch the CA system if HTTP/2 would provide only connection via TLS?