News for hackers. Stuff that matters.
Re:Google disables compression for OpenSSL in Chrome - SSL e... by sanxiyn on Wednesday September 12, 2012 @11:56AM (#4511242)
This paper published in 2002 does discuss this attack. http://www.iacr.org/cryptodb/data/paper.php?pubkey=3091

"... both the SSH and TLS protocols support an option for on-the-fly compression. Potential security implications of using compression algorithms are of practical importance to people designing systems that might use both compression and encryption."

Re:Google disables compression for OpenSSL in Chrome - SSL e... by tptacek on Wednesday September 12, 2012 @11:58AM (#4511258)
Yep. Great paper. Thanks for finding this.