RE: [users@httpd] To Gzip or not? [EXT]

2020-10-10 Thread James Smith
There are two sorts of compression - TLS and HTTP. It is recommended not to compress the TLS traffic (as CRIME can then be used to guess cookies etc) - compresses the whole response. But compressing HTTP traffic is OK - unless there is some secret stored in the body of the HTML page {it only com

Re: [users@httpd] To Gzip or not?

2020-10-10 Thread Antony Stone
On Saturday 10 October 2020 at 20:23:46, Tom Browder wrote: > I've been looking at ways to speed up my web services using > https://webpagetest.org for analysis. One thing I've been reading about is > using mod_deflate to compress certain files but keep seeing the warnings Which warnings? Where

[users@httpd] To Gzip or not?

2020-10-10 Thread Tom Browder
I've been looking at ways to speed up my web services using < https://webpagetest.org> for analysis. One thing I've been reading about is using mod_deflate to compress certain files but keep seeing the warnings about using compression with https due to certain known threats. In my searches so far