4 ms·
Careful with GZip and SSL, though - your payloads become vulnerable to the BREACH attack.
by commandlinefan 8y ago
Careful with GZip and SSL, though - your payloads become vulnerable to the BREACH attack.
- virmundi 8y agoI've seen that. My understanding is that you can compress CSS, images, pretty much anything that does not require a secret. So if your sending a secret to get an image, I think you're doing something wrong. If you keep the secret in a cookie, or transfer it in a header rather than a body, you should be clear to use Gzip and HTTP compression.