News for hackers. Stuff that matters.

A comment on Switch to HTTPS Now, For Free. Parent comment

Re:Switch to HTTPS Now, For Free by espeed on Wednesday September 25, 2013 @07:42PM (#6448060)
Yes, BREACH exploits HTTP body compression so this means typical gzip compression in HTTP results (see http://breachattack.com, http://en.wikipedia.org/wiki/HTTP_compression#Security_impli...).

Full Paper: "BREACH: Reviving the CRIME Attack" (http://breachattack.com/resources/BREACH%20-%20SSL,%20gone%2...)

[ Parent | on HN ]

There are no comments on this comment yet.