Re: SSL compression

From: Abhijit Menon-Sen <ams(at)toroid(dot)org>
To: "Michael J(dot) Baars" <mjbaars1977(dot)pgsql(dot)hackers(at)gmail(dot)com>
Cc: pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: Re: SSL compression
Date: 2021-11-08 09:30:48
Message-ID: YYjuSFMlJAnwX0UX@toroid.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

At 2021-11-08 10:10:55 +0100, mjbaars1977(dot)pgsql(dot)hackers(at)gmail(dot)com wrote:
>
> > https://en.wikipedia.org/wiki/CRIME
>
> Well Abhijit, personally I don't see any connection between crime and
> compression.

Reading the page I linked to may help you make the connection. If not,
try any of the numerous other pages that talk about vulnerabilities in
TLS related to compression.

> As I understand it, TLS is a predecessor of SSL.

No. SSL is the predecessor.

> People are trying to move away from TLS, not from compression.

No.

-- ams

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2021-11-08 09:41:04 Re: Unnecessary delay in streaming replication due to replay lag
Previous Message Magnus Hagander 2021-11-08 09:20:33 Re: SSL compression