Ask HN: LZ4 was not added as an optional compressor in HTTP/2, why gzip only?

Re:Ask HN: LZ4 was not added as an optional compressor in HT... by SamReidHughes on Wednesday May 06, 2015 @09:47PM (#9502892)

That makes more work for people to do, makes a bigger attack surface for hackers.

Also 12MB of memory used on compression (as seen in Someone1234's link) would be pretty bad for a web server.

Edit: Also, do phones have trouble keeping up with gzip decompression? Isn't it layout that's the limiting factor?

[ Parent | on HN ]

Re:Ask HN: LZ4 was not added as an optional compressor in HT... by DiabloD3 on Thursday May 07, 2015 @04:08AM (#9503815)

Possibly not bigger attack surface. lz4 is already used in a lot of mission/security critical areas, and they have audited many lz4 implementations for security and have found and fixed bugs.

For example, the Linux kernel can use LZ4, corporate VPN solutions like OpenVPN can use LZ4, and many other things can use or require LZ4.

[ Parent | on HN ]