CRIME-Vulnerability/EN/Solution Tips: Unterschied zwischen den Versionen

Aktuelle Version vom 11. Juni 2019, 12:27 Uhr

CRIME can be prevented by disabling the use of compression of data in TLS. Disable TLS Compression on your server.

Version vom 4. Juli 2018, 10:09 Uhr (Quelltext anzeigen) Siwebot (Diskussion \| Beiträge) (Die Seite wurde neu angelegt: „CRIME can be defeated by preventing the use of compression. Either on the client side, if the browser disables the compression of SPDY requests, or if the web…“)		Aktuelle Version vom 11. Juni 2019, 12:27 Uhr (Quelltext anzeigen) Siwebot (Diskussion \| Beiträge)
(2 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1:		Zeile 1:
−	CRIME can be ~~defeated~~ by ~~preventing~~ the use of ~~compression. Either on the client side, if the browser disables the~~ compression ~~of SPDY requests, or if the web page prevents the use~~ of data ~~compression for such transactions using the protocol negotiation characteristics of the~~ TLS ~~protocol~~. ~~Deactivate [[Transport Layer Security\|~~TLS-Compression]] on your server.	+	CRIME can be prevented by disabling the use of compression of data in TLS. Disable TLS Compression on your server.