Re:Show HN: BinaryRPC – Lightweight WebSocket-based RPC fram...
by efecan0 on Sunday July 13, 2025 @03:40AM
(#44548321)
Good point, thank you.
You’re right—no compression over TLS by default. If I add deflate support later it will be opt-in and disabled when the connection is encrypted.
Appreciate the insights!
It's generally unwise to use compression for encrypted transport such as TLS or HTTP/S.
https://en.wikipedia.org/wiki/Oracle_attack