5 ms·
"CRIME works only when both the browser and server support TLS compression or SPDY" If it would make more sense, then s/protocol/implementation/g or whatever y
by protobluffers 14y ago
"CRIME works only when both the browser and server support TLS compression or SPDY"
If it would make more sense, then s/protocol/implementation/g
or whatever you need to do to make sense of this.
How ever you choose to frame it, the targets are TLS and SPDY.
- tptacek 14y agoHuh? SPDY uses TLS. The target is basically "web browsers".
- anonymous 14y ago"web browsers" that support TLS compression or SPDY (which uses TLS compression) It's quite possible to use a browser that supports neither. Indeed I'm using one right now.
- newman314 14y agoDoes the SPDY spec require TLS compression? IIRC, TLS is needed. Hence, SPDY+http compress+no TLS compression is workable, no? It's not ideal but would still work...