From: rata <rata@users.noreply.github.com>
Date: Tue, 21 Apr 2015 00:43:45 +0000 (-0300)
Subject: templates/web.sssl.template.yml: Disable spdy header compression
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=c0ed494c3acf1acf629379f33f413d7660183855;p=discourse_docker.git

templates/web.sssl.template.yml: Disable spdy header compression

As explained here:

https://github.com/18F/tls-standards/issues/24

We shouldn't use spdy header compression with spdy 1.3 (the one packaged with nginx).So, just disable it.
---

diff --git a/templates/web.ssl.template.yml b/templates/web.ssl.template.yml
index aa4d3ef..e0a5b5a 100644
--- a/templates/web.ssl.template.yml
+++ b/templates/web.ssl.template.yml
@@ -25,8 +25,8 @@ run:
 
        ssl_session_tickets off;
 
-       # enable SPDY header compression
-       spdy_headers_comp 6;
+       # disable SPDY header compression (flawed in spdy < 4)
+       spdy_headers_comp 0;
 
        # remember the certificate for a year and automatically connect to HTTPS for this domain
        add_header Strict-Transport-Security 'max-age=31536000';