yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-09 16:05:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add a warning against compression in config.h

Browse source
This commit is contained in:
Manuel Pégourié-Gonnard 2014-03-11 10:30:38 +01:00 committed by Paul Bakker
parent 3baeb15c79
commit 588b66f152
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
include/polarssl/config.h
View file

@ -345,6 +345,10 @@
* If set, the SSL/TLS module uses ZLIB to support compression and
* decompression of packet data.
*
* \warning TLS-level compression MAY REDUCE SECURITY! See for example the
* CRIME attack. Before enabling this option, you should examine with care if
* CRIME or similar exploits may be a applicable to your use case.
*
* Used in: library/ssl_tls.c
* library/ssl_cli.c
* library/ssl_srv.c