<p>In this video we will explore one of the most popular side attacks CRIME Compression Ratio Info-leak Made Easy) and the different ways to mitigate this.   Intro 0:00  * HTTP/1.1 SPDY header compression 4:00* TLS compression  * Response body attackers can’t inject 13:00  * Mitigations  14:10      * HPACK/QPACK      * TLS Padding</p>

In this video we will explore one of the most popular side attacks CRIME Compression Ratio Info-leak Made Easy) and the different ways to mitigate this. Intro 0:00 * HTTP/1.1 SPDY header compression 4:00* TLS compression * Response body attackers can’t inject 13:00 * Mitigations 14:10 * HPACK/QPACK * TLS Padding

<p>In this video we will explore one of the most popular side attacks CRIME Compression Ratio Info-leak Made Easy) and the different ways to mitigate this. &nbsp;&nbsp;Intro 0:00 &nbsp;* HTTP/1.1 SPDY header compression 4:00* TLS compression &nbsp;* Response body attackers can’t inject 13:00 &nbsp;* Mitigations &nbsp;14:10 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;* HPACK/QPACK &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;* TLS Padding</p>

How HTTP Compression Leaks Sessions and JWT - CRIME Explained and how HPACK in HTTP/2 fixes this

Welcome to the Backend Engineering Show podcast with your host Hussein Nasser. If you like software engineering you’ve come to the right place. I discuss all sorts of software engineering technologies and news with specific focus on the backend. All opinions are my own. 

Most of my content in the podcast is an audio version of videos I post on my youtube channel here http://www.youtube.com/c/HusseinNasser-software-engineering 

Buy me a coffee 
https://www.buymeacoffee.com/hnasr

🧑‍🏫 Courses I Teach
https://husseinnasser.com/courses

Technology

Welcome to the Backend Engineering Show podcast with your host Hussein Nasser. If you like software engineering you’ve come to the right place. I discuss all sorts of software engineering technologies and news with specific focus on the backend. All opinions are my own. Most of my content in the podcast is an audio version of videos I post on my youtube channel here http://www.youtube.com/c/HusseinNasser-software-engineering Buy me a coffee https://www.buymeacoffee.com/hnasr 🧑‍🏫 Courses I Teach https://husseinnasser.com/courses

Share How HTTP Compression Leaks Sessions and JWT - CRIME Explained and how HPACK in HTTP/2 fixes this

Sign up to save your podcasts

How HTTP Compression Leaks Sessions and JWT - CRIME Explained and how HPACK in HTTP/2 fixes this

How HTTP Compression Leaks Sessions and JWT - CRIME Explained and how HPACK in HTTP/2 fixes this

More shows like The Backend Engineering Show with Hussein Nasser

Freakonomics Radio

Software Engineering Radio - the podcast for professional software developers

Risky Business

Science Vs

Syntax - Tasty Web Development Treats

Darknet Diaries

Practical AI

Within Reason

All-In with Chamath, Jason, Sacks & Friedberg

Dwarkesh Podcast

Big Technology Podcast

Hard Fork

The AI Daily Brief: Artificial Intelligence News and Analysis

Prof G Markets

The Pragmatic Engineer