# Crime tls attack **URL:** \ **Category:** NGINX\ **Created:** [September 26, 2012, 7:49am UTC](https://www.ruby-forum.com/t/crime-tls-attack/223220 "2012-09-26T07:49:37Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![aris](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/258eb7/32.png) [@aris](https://www.ruby-forum.com/u/aris)\ **Post date:** [September 26, 2012, 7:49am UTC](https://www.ruby-forum.com/t/crime-tls-attack/223220/1 "2012-09-26T07:49:37Z")
Hi [http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4929](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4929) Does we need to be worry about nginx? Can we disable SSL/TLS compression from server side? Pekka Panula | Jatkuvat palvelut | Sofor Oy | [www.sofor.fi](http://www.sofor.fi) Takakaarre 3 | PL 51 |FIN-62201 KAUHAVA | tel. +358 6 432 3111 | fax. +358 6 432 3555 Mob. + 358 50 384 3232 | removed\_email\_address@domain.invalid ---
**Author:** ![unknown](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/u/4bbf92/32.png) [@unknown](https://www.ruby-forum.com/u/unknown)\ **Post date:** [September 26, 2012, 8:08am UTC](https://www.ruby-forum.com/t/crime-tls-attack/223220/2 "2012-09-26T08:08:20Z")
On Wed, Sep 26, 2012 at 08:49:08AM +0300, [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > [NVD - Home](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4929) > > Does we need to be worry about nginx? Can we disable SSL/TLS compression > from server side? For OpenSSL 1.0.0+ SSL compression was disabled since 1.1.6 and 1.0.6 as a side effect of decrease of memory consumption: Changes with nginx 1.1.6 17 Oct 2011 Changes with nginx 1.0.9 01 Nov 2011 ``` *) Feature: decrease of memory consumption if SSL is used. ``` For OpenSSL 0.9.8: Changes with nginx 1.3.2 26 Jun 2012 Changes with nginx 1.2.2 03 Jul 2012 ``` *) Change: SSL compression is now disabled when using all versions ``` of OpenSSL, including ones prior to 1.0.0. – Igor S. > **[F5 NGINX: Built for cloud-native apps. Ready for AI traffic.](https://www.f5.com/products/nginx)** > > Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.