fyi:
on compression
Eric Young gave a very interesting presentation on SSL/TLS at the RSA show
('99)
part of it was on some empirical figures on the use of compression inside
SSL
the conclusion, (if I got it right) was that good compression is very close
to the properties of the data being compressed,
that a "one size fits all" compression method inside SSL wasn't going to
give worthwhile benefits for all data,
and that it is best done at application layer rather than in the network.
the paper is at
http://www.rsasecurity.com.au/rsa99/ssl-tls.pdf
regards,
/Neil Costigan
----- Original Message -----
From: "Richard Levitte - VMS Whacker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, March 22, 2001 11:08 AM
Subject: Re: Compression?
> From: "Vincent Toms" <[EMAIL PROTECTED]>
>
> vtoms> Hello,
> vtoms> I have implanted a client/server based application, which uses
OpenSSL for
> vtoms> both the client(win32) and the server(linux,openBSD). I would like
to know
> vtoms> if I can use compression in this program, and if so is there any
> vtoms> documentation.
>
> Well, you can, but not in a well-defined way since no compression
> mechanism for TLS has been properly defined yet (AFAIK). What's
> missing is an RFC defining the identities of the compression
> mechanisms to use.
>
> Still, it's possible to use compression with OpenSSL. Look in
> ssl/ssltest.c for examples. Note that the method to add compression
> methods may change in the future...
>
> --
> Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED]
> Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47
> Redakteur@Stacken \ SWEDEN \ or +46-709-50 36 10
> Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED]
> Member of the OpenSSL development team: http://www.openssl.org/
> Software Engineer, Celo Communications: http://www.celocom.com/
>
> Unsolicited commercial email is subject to an archival fee of $400.
> See <http://www.stacken.kth.se/~levitte/mail/> for more info.
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> Development Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
