Please allow to disable SSL / TLS compression to mitigate the "CRIME" attack [$10 awarded] #406

New Issue

2026-10-05T04:18:58+02:00

adam commented

2026-10-05 04:18:58 +02:00

Hi,

as a follow-up of https://github.com/znc/znc/issues/621 please also allow to disable SSL / TLS compression to mitigate the "CRIME" attack (See: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4929).

--- The **[$10 bounty](https://www.bountysource.com/issues/5543550-please-allow-to-disable-ssl-tls-compression-to-mitigate-the-crime-attack?utm_campaign=plugin&utm_content=tracker%2F1759&utm_medium=issues&utm_source=github)** on this issue has been claimed at [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F1759&utm_medium=issues&utm_source=github).

Hi, as a follow-up of https://github.com/znc/znc/issues/621 please also allow to disable SSL / TLS compression to mitigate the "CRIME" attack (See: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4929). ## <bountysource-plugin> --- The **[$10 bounty](https://www.bountysource.com/issues/5543550-please-allow-to-disable-ssl-tls-compression-to-mitigate-the-crime-attack?utm_campaign=plugin&utm_content=tracker%2F1759&utm_medium=issues&utm_source=github)** on this issue has been claimed at [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F1759&utm_medium=issues&utm_source=github). </bountysource-plugin>

adam closed this issue

2026-10-05 04:18:58 +02:00

adam commented

2026-10-05 04:18:59 +02:00

I've opened a ticket for Csocket: https://github.com/jimloco/Csocket/issues/31

I've opened a ticket for Csocket: https://github.com/jimloco/Csocket/issues/31

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: adam/znc#406