Re: [Pound Mailing List] Disabling SSL Compression (one line patch)

2012-10-05 Thread Hereward Cooper
essage- >> From: Joe Gooch [mailto:mrwiz...@k12system.com] >> Sent: Friday, October 05, 2012 11:47 AM >> To: 'pound@apsis.ch' >> Subject: RE: [Pound Mailing List] Disabling SSL Compression (one line >> patch) >> >> Also, it appears tha

RE: [Pound Mailing List] Disabling SSL Compression (one line patch)

2012-10-05 Thread Joe Gooch
/a0c52c542ca9620a96750f9877b26bf4c84aef1b.diff Joe > -Original Message- > From: Joe Gooch [mailto:mrwiz...@k12system.com] > Sent: Friday, October 05, 2012 11:47 AM > To: 'pound@apsis.ch' > Subject: RE: [Pound Mailing List] Disabling SSL Compression (one line > patch) > >

RE: [Pound Mailing List] Disabling SSL Compression (one line patch)

2012-10-05 Thread Joe Gooch
ely) but you'd want to catch those ctx options > as well. > > Joe > > > -Original Message- > > From: Hereward Cooper [mailto:co...@fawk.eu] > > Sent: Friday, October 05, 2012 10:40 AM > > To: pound@apsis.ch > > Subject: [Pound Mailing List

RE: [Pound Mailing List] Disabling SSL Compression (one line patch)

2012-10-05 Thread Joe Gooch
gt; From: Hereward Cooper [mailto:co...@fawk.eu] > Sent: Friday, October 05, 2012 10:40 AM > To: pound@apsis.ch > Subject: [Pound Mailing List] Disabling SSL Compression (one line > patch) > > Hi pound folks, > > I've successfully disabled SSL compression in pound (a re

Re: [Pound Mailing List] Disabling SSL Compression (one line patch)

2012-10-05 Thread Scott McKeown
Hi Coops, Its a great option to enable as I'm sure we all know, browser updates can be a little on the slow side and even then some Company IT Policies don't allow patches/updates to be put into place until they have been tested and checked 20 times. However, my understanding is that this is more

[Pound Mailing List] Disabling SSL Compression (one line patch)

2012-10-05 Thread Hereward Cooper
Hi pound folks, I've successfully disabled SSL compression in pound (a requirement for a platform which needs to be hardened against the CRIME attack). I'd not seen any mention of this on the mailing lists so far, so I thought I'd mention how I did it (and ask for any comments for improvements on