Hello,
I am trying to disable gzip to mitigate the breach attack( I use a service to
check for vulnerabilities and it came up with that). I added gzip off to
nginx.conf file and then check the configuration with nginx -t, and then
reloaded with systemctl reload nginx.
When I visit the site, I s
Hello!
On Wed, Oct 18, 2023 at 04:13:39PM +, alienmega via nginx wrote:
> Hello,
> I am trying to disable gzip to mitigate the breach attack( I use
> a service to check for vulnerabilities and it came up with
> that). I added gzip off to nginx.conf file and then check the
> configuration w
> I added gzip off to nginx.conf file and then check the configuration with
> nginx -t, and then reloaded with systemctl reload nginx.
>
> When I visit the site, I still have
> Accept-Encoding: gzip, deflate, br
First of all - how are you testing?
'Accept-Encoding' - is the header in http reque
Thank you for the information. I didnt notice I was lookgin at the wrong
place. It turns out that the culprit is cloudflare. If I dont use it, I can see
the gzip going on and off(as expected), but as soo as I use cloudflare, it
overwrites that response. Now I need to check on cloudflare if ther
