Re: SSL / zlib compression

2006-09-27 Thread Shahin Khorasani
Adayadil Thomas wrote: Greetings. I have an SSL session in which the client and server has negotiated for cipherSuite SSL_RSA_WITH_RC4_128_MD5 compressionMethodzlib-compression Now, is the zlib-compression applied before encryption or after ? data - zlib-compression -

SSL / zlib compression

2006-09-26 Thread Adayadil Thomas
Greetings. I have an SSL session in which the client and server has negotiated for cipherSuite SSL_RSA_WITH_RC4_128_MD5 compressionMethodzlib-compression Now, is the zlib-compression applied before encryption or after ? data - zlib-compression - encryption ==

RE: SSL / zlib compression

2006-09-26 Thread Vinu Thomas
I am almost sure its after... First you encrypt and then compress. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adayadil Thomas Sent: Tuesday, September 26, 2006 7:46 PM To: openssl-dev@openssl.org Subject: SSL / zlib compression Greetings. I have

Re: SSL / zlib compression

2006-09-26 Thread Brad House
I have an SSL session in which the client and server has negotiated for cipherSuite SSL_RSA_WITH_RC4_128_MD5 compressionMethodzlib-compression Now, is the zlib-compression applied before encryption or after ? data - zlib-compression - encryption == decrypt -

Re: SSL / zlib compression

2006-09-26 Thread Bernhard Froehlich
Vinu Thomas wrote: I am almost sure its after... First you encrypt and then compress. No way. First compression, then encryption, like Brad already said. Encrypted data is (almost) incompressible, regardless of cleartext. Hope it helps. Ted ;) -- PGP Public Key Information Download