2

How is are privacy/anonymity affected by the use of HTTP/2? Did anyone look into this yet?

I suppose that timing attacks might be simpler, because HTTP/2 has sever push and not-requested content might be sent, until the browser cancels them. On the other hand the use of a single (encrypted) stream might make that harder, when looked on from the outside.

Does the protocol introduce new possibilities for fingerprinting?

Is there any research on this yet? Does the TBB take HTTP/2 into consideration? If there was no research yet, would it make sense to disable HTTP/2 for now, until implications are better understood (and workarounds for any problems that might pop up are in place)?

And maybe as side question: How does HTTP/2 affect browsing speed? The protocol might be optimized, but high latency seems to be a bigger issue than with HTTP/1.1.

Improve this question

1 Answer 1

Reset to default
1

No problem in using any TCP-based protocol over Tor : including HTTP. The privacy implications during web surfing via Tor are not related in any matter to the protocol used : it is a client-side software case(s). So if you have a secure browsing habbits and software - use it well and enjoy the speed of HTTP/2

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .