From c162d22c35894657f675777ba31fc4534b0848d4 Mon Sep 17 00:00:00 2001 From: Thien Tran Date: Fri, 25 Aug 2023 15:28:59 -0700 Subject: [PATCH] Disable gzip compression for mailcow Signed-off-by: Thien Tran --- content/posts/linux/Slightly Improving Mailcow Security.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/posts/linux/Slightly Improving Mailcow Security.md b/content/posts/linux/Slightly Improving Mailcow Security.md index 26ffcea..f91409a 100644 --- a/content/posts/linux/Slightly Improving Mailcow Security.md +++ b/content/posts/linux/Slightly Improving Mailcow Security.md @@ -98,3 +98,7 @@ If you do not use Gravatar with SOGo, you can also set COEP to require-corp sinc ``` add_header Cross-Origin-Embedder-Policy require-corp; ``` + +### GZIP Compression + +Disable gzip compression to avoid the BREACH attack. Change `gzip on;` to `gzip off;`. \ No newline at end of file