3 ms·
I'd be really curious to hear the security discussion around S3 compression, or if they added any additional mitigations. Compressing data and then encrypting i
by fourfourthree 4y ago
I'd be really curious to hear the security discussion around S3 compression, or if they added any additional mitigations. Compressing data and then encrypting it will be vulnerable to a padding oracle attack[1].
[1] https://en.m.wikipedia.org/wiki/CRIME https://en.m.wikipedia.org/wiki/CRIME