summaryrefslogtreecommitdiff
path: root/doc/cha-gtls-app.texi
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2012-09-16 11:21:45 +0200
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2012-09-16 11:21:45 +0200
commit5ba6e25952cd7bc775e670a0706a051fbeaab0c7 (patch)
treea3ed88dd47128c2def6590d44ae734604dd5fcf2 /doc/cha-gtls-app.texi
parent8e1fe856b3b6a4c0b6f01b4d7f8d4e2f9af0ebd3 (diff)
downloadgnutls-5ba6e25952cd7bc775e670a0706a051fbeaab0c7.tar.gz
use a %STATELESS_COMPRESSION priority string instead of gnutls_init() flag.
Diffstat (limited to 'doc/cha-gtls-app.texi')
-rw-r--r--doc/cha-gtls-app.texi5
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/cha-gtls-app.texi b/doc/cha-gtls-app.texi
index 7345684794..7e82a42ed1 100644
--- a/doc/cha-gtls-app.texi
+++ b/doc/cha-gtls-app.texi
@@ -979,6 +979,11 @@ will prevent the sending of any TLS extensions in client side. Note
that TLS 1.2 requires extensions to be used, as well as safe
renegotiation thus this option must be used with care.
+@item %STATELESS_COMPRESSION @tab
+will disable keeping state across records when compressing. This may
+help to mitigate attacks when compression is used but an attacker
+is in control of input data.
+
@item %SERVER_PRECEDENCE @tab
The ciphersuite will be selected according to server priorities
and not the client's.