Re:Security advisory: Breach and Django
by bobwaycott on Tuesday August 06, 2013 @11:31PM
(#6170654)
> Really, production environments are not the place to try un-vetted academic crypto research.
A very salient piece of cautionary advice. Disable gzip to protect prod. Figure out what to do to allow compression off prod, and engage the devs of your stack/framework to do this correctly.
A very salient piece of cautionary advice. Disable gzip to protect prod. Figure out what to do to allow compression off prod, and engage the devs of your stack/framework to do this correctly.