Google disables compression for OpenSSL in Chrome - SSL exploit coming?

Re:Google disables compression for OpenSSL in Chrome - SSL e... by pbiggar on Wednesday September 12, 2012 @11:47AM (#4511191)

Reading the title, I thought that Chrome was turning of gzip based compression for HTTP bodies when using SSL. According to http://security.stackexchange.com/a/19914 (linked above by jgrahamc), it is in fact header compression that is TLS specific. So a giant sigh of relief from me.

[ Parent | on HN ]

Re:Google disables compression for OpenSSL in Chrome - SSL e... by wladimir on Thursday September 13, 2012 @01:59AM (#4514969)

Thanks for noting this. I also got this wrong on the first reading. Having to drop gzip compression of the content would be terrible. I fathom that header compression helps if you have many requests (polling etc), but for most websites it is much less influential in bandwidth usage.

[ Parent | on HN ]