News for hackers. Stuff that matters.
Re:Google disables compression for OpenSSL in Chrome - SSL e... by tptacek on Wednesday September 12, 2012 @12:46PM (#4511560)
The attack Pornin outlined involves only the client TX stream, which the attacker shares with the defender by virtue of content-controlled Javascript.
Re:Google disables compression for OpenSSL in Chrome - SSL e... by geofft on Wednesday September 12, 2012 @01:21PM (#4511760)
Oh, I got Set-Cookie and Cookie mixed up in my head. You're right.