3 ms·
> On dynamic pages, do you compress on the fly? If there's any secret info being transmitted (ie, session tokens) and you're using TLS, you shouldn't be using
by Sohcahtoa82 4y ago
> On dynamic pages, do you compress on the fly?
If there's any secret info being transmitted (ie, session tokens) and you're using TLS, you shouldn't be using compression.
https://en.wikipedia.org/wiki/CRIME_(security_exploit) https://en.wikipedia.org/wiki/CRIME_(security_exploit)
https://en.wikipedia.org/wiki/BREACH https://en.wikipedia.org/wiki/BREACH