11 ms·
Do you have some stats? I'm interested in the "TLS Compression" part (e.g. can I remove the breach-mitigation-rails gem from my project)
by DorianMarie 13y ago
Do you have some stats? I'm interested in the "TLS Compression" part (e.g. can I remove the breach-mitigation-rails gem from my project)
- ivanr 13y agoThe compression-related issue in the TLS protocol is known as CRIME. BREACH actually applies to HTTP response body compression. So, chances are that you should continue to use the breach-mitigation-rails gem, even if your server does not support compression at the TLS level. (Disclaimer: I am not familiar with this gem; just inferring its purpose from the name.)