Add a warning against compression in config.h
This commit is contained in:
parent
14ed1a2934
commit
bb4dd37044
1 changed files with 4 additions and 0 deletions
|
@ -939,6 +939,10 @@
|
|||
* If set, the SSL/TLS module uses ZLIB to support compression and
|
||||
* decompression of packet data.
|
||||
*
|
||||
* \warning TLS-level compression MAY REDUCE SECURITY! See for example the
|
||||
* CRIME attack. Before enabling this option, you should examine with care if
|
||||
* CRIME or similar exploits may be a applicable to your use case.
|
||||
*
|
||||
* Used in: library/ssl_tls.c
|
||||
* library/ssl_cli.c
|
||||
* library/ssl_srv.c
|
||||
|
|
Loading…
Reference in a new issue