5 ms·
Isn't security one of their major concerns? Before you encrypt something as compressible as headers, it's a good idea to compress it first. At the least, when
by pronoiac 15y ago
Isn't security one of their major concerns? Before you encrypt something as compressible as headers, it's a good idea to compress it first. At the least, when brute forcing decryption keys, it makes it more complex to check the output.
- gcp 15y agoBrute forcing a key shouldn't be a concern, nor should a known-plaintext attack be. If it is, your crypto is broken. That said, compression before encryption means there's less data to encrypt, so you win back some performance lost by the compression. Nevertheless, I'm sure the considerations were something else entirely (such as compression seldom being done by TLS).