1
0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-07-13 09:01:48 +03:00

Add a warning against compression in config.h

This commit is contained in:
Manuel Pégourié-Gonnard
2014-03-11 10:30:38 +01:00
parent 14ed1a2934
commit bb4dd37044

View File

@ -939,6 +939,10 @@
* If set, the SSL/TLS module uses ZLIB to support compression and
* decompression of packet data.
*
* \warning TLS-level compression MAY REDUCE SECURITY! See for example the
* CRIME attack. Before enabling this option, you should examine with care if
* CRIME or similar exploits may be a applicable to your use case.
*
* Used in: library/ssl_tls.c
* library/ssl_cli.c
* library/ssl_srv.c