How to turn off gzip compression for SSL traffic

howard chen howachen at
Sat Aug 17 04:59:30 UTC 2013


As you know, due the breach attack (, HTTP
compression is no longer safe (I assume nginx don't use SSL compression by
default?), so we should disable it.

Now, We are using config like the following:

    gzip on;

    server {
        listen default_server;
        listen default_server ssl;

With the need to split into two servers section, is it possible to turn off
gzip when we are using SSL?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the nginx mailing list