How to turn off gzip compression for SSL traffic
howachen at gmail.com
Sat Aug 17 04:59:30 UTC 2013
As you know, due the breach attack (http://breachattack.com), HTTP
compression is no longer safe (I assume nginx don't use SSL compression by
default?), so we should disable it.
Now, We are using config like the following:
listen 127.0.0.1:80 default_server;
listen 127.0.0.1:443 default_server ssl;
With the need to split into two servers section, is it possible to turn off
gzip when we are using SSL?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the nginx