On 23.1.2013 2:13, Tim Whittington wrote:
As far as I know, JSSE doesn't support compression.
[1] claims this, but doesn't have a reference, and I can't find
anything else useful on the internet, although i recall an analysis of
the CRIME attack that claimed the same thing.
I tested couple of my Tomcat installations, each of them uses JSSE, with
this tool:
https://www.ssllabs.com/ssltest/analyze.html
I came to the same conclusion, JSSE probably doesn't support compression
at all (or, at least, out-of-the-box).
-Ognjen
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
