http/1 traffic is a lot easier to inspect