How to implement http2 without ssl in Apache 2.4.18 Server

Question

I created a website with the HTTP / 2 protocol that runs on the Apache 2.4.18 HTTP server. Currently, I have made the SSL site enabled because I read somewhere that over HTTP / 2, SSL is required by default. I can’t claim that my site is secure, so I don’t want to spend money on buying an SSL certificate.

Is there a way to implement the HTTP2 protocol without using SSL configurations? If so, what configuration parameters should be written in the httpd.conf file? Do I need to change any properties / settings of my browser - Chrome / Firefox, etc.?

Answer 1

As far as I know, most web browsers will not use the HTTP2 protocol if you connect to the website via HTTP instead of HTTPS.

There are many places where you can get an SSL certificate for free, such as StartSSL , Universal SSL , Allows encryption (see here ) and others. The certificate may not be for a long period of time and may not have additional properties such as Time-Stamping (for example, here ), but it may still be used. You can still use the certificate for free.

Here you can read here, for example, instructions for configuring HTTP2 in Apache HTTP Server. The most important thing would be to use the latest version of OpenSSL and the latest version of Apache Server. I would recommend you read the article on HTTP2, watch the video and the corresponding slides here on how to make TLS faster and go through the checklist .