The attack builds on the CRIME attack, which is discussed in more technical detail here: http://zoompf.com/2012/09/explaining-the-crime-weakness-in-spdy-and-ss

The attack builds on the CRIME attack, which is discussed in more technical detail here: http://zoompf.com/2012/09/explaining-the-crime-weakness-in-spdy-and-ssl http://zoompf.com/2012/09/explaining-the-crime-weakness-in-s... That page suggests that guessing known text like an SSN or email address contained in the body would give them an opening to break the encryption entirely, but I don't know enough about crypto to know if that's actually a possibility.