Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Google disables compression for OpenSSL in Chrome - SSL exploit coming?. Parent comment
1. Attacker controls some parts of plaintext
2. Attacker's content is mixed with content attacker wants to discover
3. Attacker can make repeated trials against the same plaintext (not against same ciphertext stream or key)
4. Defender compresses content on the fly
There are probably other cryptosystems that have this flaw, but it's less inherent to TLS than it is to the HTTPS security model.
There are no comments on this comment yet.
1. Attacker controls some parts of plaintext
2. Attacker's content is mixed with content attacker wants to discover
3. Attacker can make repeated trials against the same plaintext (not against same ciphertext stream or key)
4. Defender compresses content on the fly
There are probably other cryptosystems that have this flaw, but it's less inherent to TLS than it is to the HTTPS security model.