4 ms·
I wish there was a simpler way to use Brotli with Nginx: at the moment, either you have to compile from sources, either rely on a PPA to use a special build of
by wildpeaks 8y ago
I wish there was a simpler way to use Brotli with Nginx: at the moment, either you have to compile from sources, either rely on a PPA to use a special build of Nginx (and an extra module) instead of the one from the LTS packages, even in 18.04.
I'd especially like to use Brotli because it has good support in modern browsers (pretty much everything except IE11) and would be good replacement for gzip (which should be disabled for HTTPS).
- chrisweekly 8y ago> "gzip (which should be disabled for HTTPS)" ? Please explain.
- evil-olive 8y agoBREACH and CRIME [0,1] are attacks on the combination of HTTPS and compression. There are workarounds / mitigations with various effectiveness, but disabling compression when TLS is used is the simple way to prevent the attack. 0: https://en.wikipedia.org/wiki/BREACH https://en.wikipedia.org/wiki/BREACH 1: https://en.wikipedia.org/wiki/CRIME https://en.wikipedia.org/wiki/CRIME
- emj 8y agoI thought the TLS length hiding extension was supposed to fix this, I wonder why it did not progress. Maybe it is just easier to disable compression for dynamic content. [0] https://tools.ietf.org/html/draft-pironti-tls-length-hiding-02 https://tools.ietf.org/html/draft-pironti-tls-length-hiding-...