I have an SSL session in which the client and server has negotiated for
cipherSuite SSL_RSA_WITH_RC4_128_MD5
compressionMethod zlib-compression
Now, is the zlib-compression applied before encryption or after ?
data -> zlib-compression -> encryption ======> decrypt ->
zlib->inflate-> data
or
data -> encryption -> zlib-compression ======> zlib->inflate-> decrypt
-> data
Considering encrypted data, by nature, should not be predictable,
and therefore not compressible, your second listing would not be
logical.
-Brad
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
