tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ognjen Blagojevic <>
Subject Re: Disable TLS compression in JSSE
Date Wed, 23 Jan 2013 14:43:55 GMT
On 23.1.2013 2:13, Tim Whittington wrote:
> As far as I know, JSSE doesn't support compression.
> [1] claims this, but doesn't have a reference, and I can't find
> anything else useful on the internet, although i recall an analysis of
> the CRIME attack that claimed the same thing.

I tested couple of my Tomcat installations, each of them uses JSSE, with 
this tool:

I came to the same conclusion, JSSE probably doesn't support compression 
at all (or, at least, out-of-the-box).


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message