one, SPDY or HTTP2. Precisely what is visible on the two endpoints is irrelevant, since the target of encryption is not for making things invisible but to create items only noticeable to trustworthy events. Therefore the endpoints are implied within the issue and about 2/3 of your answer may be removed. The proxy info ought to be: if you use an HTT