[openssl-users] removing compression?

[Richard Moore]

On 7 April 2015 at 17:49, Jakob Bohm <jb-openssl at wisemo.com> wrote:

>  It also appears the HTTP/2.0 draft aka SPDY requires
> compression to be enabled, though I don't know if that
> is at the TLS or HTTP level.
>

HTTP/2 does not require TLS compression. It does however use it's own
compression for headers (hpack) which is designed to be safe from attacks
like CRIME.

Cheers

Rich.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20150407/bf13123a/attachment.html>