Disable SSL / TLS compression in Apache 2.2.x

Posted by DevGav on Server Fault See other posts from Server Fault or by DevGav
Published on 2012-12-09T20:57:43Z Indexed on 2012/12/09 23:10 UTC
Read the original article Hit count: 267

Filed under:
|
|
|
|

Is there a way to disable SSL/TLS Compression in Apache 2.2.x when using mod_ssl?

If not, what are people doing to mitigate the effects of CRIME/BEAST in older browsers?

Related Links:

  1. https://issues.apache.org/bugzilla/show_bug.cgi?id=53219
  2. https://threatpost.com/en_us/blogs/new-attack-uses-ssltls-information-leak-hijack-https-sessions-090512
  3. http://security.stackexchange.com/questions/19911/crime-how-to-beat-the-beast-successor

© Server Fault or respective owner

Related posts about apache2

Related posts about security