http - 为什么 HTTP 不支持 Brotli？

Question

我注意到一件奇怪的事情，显然 Firefox 说它支持 HTTPS 上的 Brotli，但不支持 HTTP？由于 Brotli 类似于 gzip 但效率更高，为什么它会限制为 HTTPS？在 HTTPS 选项卡上，我看到:

接受编码:gzip、deflate、br

已发送。但是在其他网站上我看不到 br。为什么它不能执行 Brotli 压缩的 HTTP？

Answer 1

The reason to limit brotli to secure contexts is that intermediaries (specifically, buggy proxies and content scanners) tend to behave very poorly when they encounter non-deflate/gzip Content-Encoding. The Google guys discovered this when they rolled out ‘sdch’ and ‘bzip2’ before that; they ended up pulling bzip2 partly for that reason and sdch has a number of hacks that they had to put in. By requiring HTTPS for brotli, they can head off this problem in most cases because comparatively few content-scanners MITM HTTPS streams

取自https://hacks.mozilla.org/2015/11/better-than-gzip-compression-with-brotli/