Yes, BREACH exploits HTTP body compression so this means typical gzip compression in HTTP results (see http://breachattack.com http://breachattack.com, http://e

Yes, BREACH exploits HTTP body compression so this means typical gzip compression in HTTP results (see http://breachattack.com http://breachattack.com, http://en.wikipedia.org/wiki/HTTP_compression#Security_implications http://en.wikipedia.org/wiki/HTTP_compression#Security_impli...). Full Paper: "BREACH: Reviving the CRIME Attack" (http://breachattack.com/resources/BREACH%20-%20SSL,%20gone%20in%2030%20seconds.pdf http://breachattack.com/resources/BREACH%20-%20SSL,%20gone%2...)