News for hackers. Stuff that matters.

A comment on Google disables compression for OpenSSL in Chrome - SSL exploit coming?. Parent comment

Re:Google disables compression for OpenSSL in Chrome - SSL e... by moxie on Wednesday September 12, 2012 @12:20PM (#4511392)
You also need the client and server to both support TLS compression. But there aren't any major sites (that I know of) which do support TLS compression.
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by ivanr on Wednesday September 12, 2012 @12:43PM (#4511546)
In my quick test, about 42% of the sites in the SSL Pulse data set (~180k SSL sites in Alexa's top 1m) support compression. For example, mail.yahoo.com does.
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by cryptlamex on Wednesday September 12, 2012 @03:16PM (#4512520)
Google, Yahoo, Twitter are vulnerable based on SSL Labs tool
[ Parent | on HN ]