SSL Tests like https://www.ssllabs.com/ssltest/index.html show a vulnerability against CRIME Attack. To overcome / defend that with apache you can turn off the SSL compression.
SSLCompression off
That makes it easy to defend it.
SSL Tests like https://www.ssllabs.com/ssltest/index.html show a vulnerability against CRIME Attack. To overcome / defend that with apache you can turn off the SSL compression.
SSLCompression off
That makes it easy to defend it.
Tags: apache, CVE, openssl, ssl, TLS
This entry was posted on Wednesday, October 10th, 2012 and is filed under apache. You can follow any responses to this entry through RSS 2.0. You can leave a response, or trackback from your own site.
powered by Apache 2.4