I wrote:
My conclusion: I will add "compression = none" global option implemented as: #ifndef OPENSSL_NO_COMP sk_SSL_COMP_zero(SSL_COMP_get_compression_methods()); #endif
On second thought: This might be probably even better to switch compression off by default. The memory and CPU requirements of compression probably make it a bad choice for ~90% of users.
The available parameters will be: - deflate - RFC 3749 https://www.ietf.org/rfc/rfc3749.txt - zlib - OpenSSL 0.9.7 compatibility - rle - OpenSSL 0.9.7 compatibility The default will be to disable compression entirely.
What do you think?
Mike