3 ms·
Interesting. The attacker would also need to push the request size up to the next block boundary, but it should work. At least we can still do compression at
by amalcon 14y ago
Interesting. The attacker would also need to push the request size up to the next block boundary, but it should work.
At least we can still do compression at the HTTP (or other higher-level protocol) level. That gets us most of the benefit anyway.
- __alexs 14y agoI suspect most TLS libraries will flush the compression buffer after each write call so its highly likely that every request will end on a deflate block boundary already.