4 ms·
You also need the client and server to both support TLS compression. But there aren't any major sites (that I know of) which do support TLS compression.
by moxie 14y ago
You also need the client and server to both support TLS compression. But there aren't any major sites (that I know of) which do support TLS compression.
- ivanr 14y agoIn my quick test, about 42% of the sites in the SSL Pulse data set (~180k SSL sites in Alexa's top 1m) support compression. For example, mail.yahoo.com does.
- cryptlamex 14y agoGoogle, Yahoo, Twitter are vulnerable based on SSL Labs tool