# New SSL stream context option to prevent CRIME attack vector

- Thread: https://externals.io/message/65520
- Original archive: https://news-web.php.net/php.internals/65520
- Started by Lars Strojny on 2013-01-30T21:25:01+00:00
- Messages: 2
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #65520 — Lars Strojny — 2013-01-30T21:25:01+00:00

URL: https://externals.io/message/65520#65520

Hi,

we have an open PR for a new SSL stream context option to prevent the CRIME attack vendor. Anybody with more familiar knowledge of SSL should have a look: https://github.com/php/php-src/pull/269

cu,
Lars

---

## #65620 — Ferenc Kovacs — 2013-02-04T09:33:58+00:00

URL: https://externals.io/message/65520#65620 · In reply to: #65520

> Hi,
>
> we have an open PR for a new SSL stream context option to prevent the
> CRIME attack vendor. Anybody with more familiar knowledge of SSL should
> have a look: https://github.com/php/php-src/pull/269
>
> cu,
> Lars
> --
> 
> 
>
>
hi,

it seems that you merged this one.
did somebody found the time to review the changes?

-- 
Ferenc Kovács
@Tyr43l - http://tyrael.hu