2017-02-04 18:55 GMT+03:00 Patrizio Munzi <patrizio.mu...@gmail.com>:
> It looks like tomcat 8.5 HTTP/2 protocol does not support GZIP compression.
> Can anyone confirm or give advise on how to enable it?
>
> The following does not work:
>
> <Connector protocol="org.apache.coyote.http11.Http11AprProtocol" port="8443"
> connectionTimeout="20000" executor="main" SSLEnabled="true" scheme="https"
> secure="true" URIEncoding="UTF-8" maxHttpHeaderSize="10240"
> compression="force" SSLCertificateKeyFile="${tomcat.conf.dir}/key.pem"
> SSLCertificateFile="${tomcat.conf.dir}/cert.pem" SSLPassword="changeit">
> <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
> </Connector>
When you ask about compression of dynamic content, I think that you
should read about the following well-known issues first, especially
the latter one:
https://en.wikipedia.org/wiki/CRIME_(security_exploit)
https://en.wikipedia.org/wiki/BREACH_(security_exploit)
Best regards,
Konstantin Kolinko
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org
