CRIME-Vulnerability/EN/Solution Tips

Aus Siwecos
Version vom 4. Juli 2018, 10:09 Uhr von Siwebot (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „CRIME can be defeated by preventing the use of compression. Either on the client side, if the browser disables the compression of SPDY requests, or if the web…“)
(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)
Wechseln zu: Navigation, Suche

CRIME can be defeated by preventing the use of compression. Either on the client side, if the browser disables the compression of SPDY requests, or if the web page prevents the use of data compression for such transactions using the protocol negotiation characteristics of the TLS protocol. Deactivate TLS-Compression on your server.