%% You should probably cite draft-ietf-httpbis-http2-secondary-certs instead of this I-D. @techreport{bishop-httpbis-http2-additional-certs-00, number = {draft-bishop-httpbis-http2-additional-certs-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-bishop-httpbis-http2-additional-certs/00/}, author = {Mike Bishop}, title = {{Secondary Server-Certificate Authentication in HTTP/2}}, pagetotal = 8, year = 2016, month = mar, day = 15, abstract = {Many HTTP servers host content from several origins. HTTP/2 {[}RFC7540{]} permits clients to reuse an existing HTTP connection to a server provided that certain conditions are satisfied. One of these conditions is the inclusion of the secondary origin in the certificate provided during the TLS {[}I-D.ietf-tls-tls13{]} handshake. In many cases, origins will wish to maintain separate certificates for different origins but still desire the benefits of a shared HTTP connection. This draft describes how frames which were defined to transfer client certificates might be used to provide additional server certificates as well.}, }