Re:New attack plucks secrets from HTTPS-protected pages
by IvyMike on Saturday August 03, 2013 @03:38PM
(#6153090)
If we had fixed-ration compression, the attack would be impossible.
You could attempt to simulate that: after compression, add random padding so that it looks like a fixed 2:1 compression ratio.
This is wasteful if the data compressed better than 2:1. And if the data doesn't compress as well as 2:1, I'm not sure what you would do. (Maybe do no compression. But now you've leaked a tiny bit of info...)
You could attempt to simulate that: after compression, add random padding so that it looks like a fixed 2:1 compression ratio.
This is wasteful if the data compressed better than 2:1. And if the data doesn't compress as well as 2:1, I'm not sure what you would do. (Maybe do no compression. But now you've leaked a tiny bit of info...)