Re: Disable TLS compression in JSSE

2013-01-23 Thread Christopher Schultz
Tim, On 1/22/13 8:13 PM, Tim Whittington wrote: > As far as I know, JSSE doesn't support compression. > [1] claims this, but doesn't have a reference, and I can't find > anything else useful on the internet, although i recall an analysis of > the CRIME attack that claimed the same thing. Thanks -

Re: Disable TLS compression in JSSE

2013-01-23 Thread Ognjen Blagojevic
On 23.1.2013 2:13, Tim Whittington wrote: As far as I know, JSSE doesn't support compression. [1] claims this, but doesn't have a reference, and I can't find anything else useful on the internet, although i recall an analysis of the CRIME attack that claimed the same thing. I tested couple of m

Re: Disable TLS compression in JSSE

2013-01-22 Thread Tim Whittington
As far as I know, JSSE doesn't support compression. [1] claims this, but doesn't have a reference, and I can't find anything else useful on the internet, although i recall an analysis of the CRIME attack that claimed the same thing. At this point I'd probably opt for an OpenJDK code dive. tim [1