This looks like exactly the kind of vulnerability that Tony Arcieri is, correctly, saying doesn&#x27;t happen with modern ciphers.<p>HTTP2 doesn&#x27;t &quot;use IVs&quot; at all, in that encryption in HTTP2 is provided by TLS. TLS does use random IVs, and modern TLS uses them correctly.