Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:65520 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 49653 invoked from network); 30 Jan 2013 21:25:10 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 30 Jan 2013 21:25:10 -0000 Authentication-Results: pb1.pair.com header.from=lars@strojny.net; sender-id=unknown Authentication-Results: pb1.pair.com smtp.mail=lars@strojny.net; spf=permerror; sender-id=unknown Received-SPF: error (pb1.pair.com: domain strojny.net from 46.4.40.248 cause and error) X-PHP-List-Original-Sender: lars@strojny.net X-Host-Fingerprint: 46.4.40.248 milch.schokokeks.org Received: from [46.4.40.248] ([46.4.40.248:42070] helo=milch.schokokeks.org) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 81/7A-09318-2BF89015 for ; Wed, 30 Jan 2013 16:25:09 -0500 Received: from [IPv6:2001:a60:1218:ad00:90a6:75e7:7bcc:4296] ([2001:a60:1218:ad00:90a6:75e7:7bcc:4296]) (AUTH: PLAIN lars@schokokeks.org, TLS: TLSv1/SSLv3,128bits,AES128-SHA) by milch.schokokeks.org with ESMTPSA; Wed, 30 Jan 2013 22:25:03 +0100 id 0000000000000028.0000000051098FAF.00004C05 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-ID: Date: Wed, 30 Jan 2013 22:25:01 +0100 To: "internals@lists.php.net internals" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: New SSL stream context option to prevent CRIME attack vector From: lars@strojny.net (Lars Strojny) Hi, we have an open PR for a new SSL stream context option to prevent the = CRIME attack vendor. Anybody with more familiar knowledge of SSL should = have a look: https://github.com/php/php-src/pull/269 cu, Lars=