diff .editorconfig @ 29558:a935cd7d51a6

sslutil: prevent CRIME ssl.create_default_context() disables compression on the TLS channel in order to prevent CRIME. I think we should follow CPython's lead and attempt to disable channel compression in order to help prevent information leakage. Sadly, I don't think there is anything we can do on Python versions that don't have an SSLContext, as there is no way to set channel options with the limited ssl API.
author Gregory Szorc <gregory.szorc@gmail.com>
date Thu, 14 Jul 2016 20:07:10 -0700
parents d30fdd6d1bf7
children 1d6066336d7b
line wrap: on
line diff