Shib IdP V3.2.1, Jetty 9.3.6, and HTTP/2

[Cantor, Scott]

> That's my two cents anyway. Not sure what the project wants to
> recommend.

Our default suggestions are in the wiki, and I'm pretty sure it doesn't end up enabling http2. If that's mistaken, I'll look into it, I didn't notice that being on by default in 9.3.

Otherwise, we have nothing much to say about it unless it impacts the IdP, and nothing here did. Honestly now that the back-channel is largely history (and any future work will be over 443 with signing), I start to wonder if it's time to think about recommending Apache. I wouldn't hesitate if it weren't for them dropping AJP, I just don't trust HTTP proxying and I'm not sure I'll ever be comfortable enough with it.
 
-- Scott