Simple BREACH workaround for gzip

has anyone considered this simple workaround for BREACH and
gzip-compression, i.e. randomly interspersed flush()-es during
It would be compatible with all clients, and should be fairly easy to
implement in nginx (for nginx hackers).
Of course, it doesn’t prevent BREACH attacks, but it makes them much

PS: yes, I’m aware that BREACH should also be prevented in the

Posted at Nginx Forum:,249301,249301#msg-249301

This forum is not affiliated to the Ruby language, Ruby on Rails framework, nor any Ruby applications discussed here.

| Privacy Policy | Terms of Service | Remote Ruby Jobs