4 ms·

Always support compressed response in an API service

• DamonHD 2y ago
  Yes, indeed. And accept at least gzip compression on the client side! https://www.earth.org.uk/RSS-efficiency.html https://www.earth.org.uk/RSS-efficiency.html
• deleted 2y ago
  [deleted]
• frizlab 2y ago
  Your API should always be behind a reverse proxy (e.g. nginx) which will almost always have compression enabled. Not sure enabling compression at the API level is necessary.
  • ashishb 2y ago
    Nginx does not enable it by default.
    • frizlab 2y ago
      I don’t know about other distributions, but on Debian the nginx package does have a default configuration with “gzip on” set.
• sebazzz 2y ago
  Isn’t https compression a no-go due to BREACH and CRIME?
  • DamonHD 2y ago
    No. That was to do with manipulating header content to break cyphers. Compressable bodies that cannot be influenced by a counterparty should be compressed.