tests/test-wireproto.py.out
author Gregory Szorc <gregory.szorc@gmail.com>
Thu, 14 Jul 2016 20:07:10 -0700
changeset 29558 a935cd7d51a6
parent 25708 d3d32643c060
child 37923 40381a88bab4
permissions -rw-r--r--
sslutil: prevent CRIME ssl.create_default_context() disables compression on the TLS channel in order to prevent CRIME. I think we should follow CPython's lead and attempt to disable channel compression in order to help prevent information leakage. Sadly, I don't think there is anything we can do on Python versions that don't have an SSLContext, as there is no way to set channel options with the limited ssl API.

Hello, Foobar
['Hello, Fo, =;:<o', 'Hello, Bar']