tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <>
Subject Re: Disable TLS compression in JSSE
Date Wed, 23 Jan 2013 18:46:29 GMT

On 1/22/13 8:13 PM, Tim Whittington wrote:
> As far as I know, JSSE doesn't support compression.
> [1] claims this, but doesn't have a reference, and I can't find
> anything else useful on the internet, although i recall an analysis of
> the CRIME attack that claimed the same thing.

Thanks -- makes sense that I couldn't find any documentation on
disabling it, then ;)

> At this point I'd probably opt for an OpenJDK code dive.

Hooray! (fyi I'm not wearing my "hooray" face when I say that).


View raw message