mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-07-13 09:01:48 +03:00
Add a warning against compression in config.h
This commit is contained in:
@ -939,6 +939,10 @@
|
||||
* If set, the SSL/TLS module uses ZLIB to support compression and
|
||||
* decompression of packet data.
|
||||
*
|
||||
* \warning TLS-level compression MAY REDUCE SECURITY! See for example the
|
||||
* CRIME attack. Before enabling this option, you should examine with care if
|
||||
* CRIME or similar exploits may be a applicable to your use case.
|
||||
*
|
||||
* Used in: library/ssl_tls.c
|
||||
* library/ssl_cli.c
|
||||
* library/ssl_srv.c
|
||||
|
Reference in New Issue
Block a user