In HTTP/1.1, the client can request a change to a new protocol on the existing connection. This document discusses the security