tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ognjen Blagojevic <ognjen.d.blagoje...@gmail.com>
Subject Re: Disable TLS compression in JSSE
Date Wed, 23 Jan 2013 14:43:55 GMT
On 23.1.2013 2:13, Tim Whittington wrote:
> As far as I know, JSSE doesn't support compression.
> [1] claims this, but doesn't have a reference, and I can't find
> anything else useful on the internet, although i recall an analysis of
> the CRIME attack that claimed the same thing.

I tested couple of my Tomcat installations, each of them uses JSSE, with 
this tool:

   https://www.ssllabs.com/ssltest/analyze.html

I came to the same conclusion, JSSE probably doesn't support compression 
at all (or, at least, out-of-the-box).

-Ognjen


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message