is an entirely different protocol, tighten up the version checks
correspondingly.

Also reject HTTP variants prior to HTTP/1.0.