News for hackers. Stuff that matters.

A comment on Google disables compression for OpenSSL in Chrome - SSL exploit coming?.

Re:Google disables compression for OpenSSL in Chrome - SSL e... by tonyb on Wednesday September 12, 2012 @11:12AM (#4511026)
Doesn't look like this has anything to do with an exploit. It is because some older web servers who don't support TLS also don't support compression.

See:http://code.google.com/p/chromium/issues/detail?id=31628

[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by EwanToo on Wednesday September 12, 2012 @11:19AM (#4511051)
That's always possible, but why would the bug report linked from the code change be private then?

http://code.google.com/p/chromium/issues/detail?id=139744

[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by abadidea on Wednesday September 12, 2012 @11:19AM (#4511053)
No, I doubt that something closed in early 2010 has much to do with a new patch that has a rationale disabled from public viewing which implies it's a security emergency.
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by tonyb on Wednesday September 12, 2012 @03:03PM (#4512423)
You are correct, I misread the code commit. The link to the 2010 bug was removed from the code, not added to it.
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by tptacek on Wednesday September 12, 2012 @11:33AM (#4511110)
I think 'jgrahamc is right.
[ Parent | on HN ]