<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Re: Regarding Https Compression (on Chrome Browser)
</h3>
<span style="margin-bottom: 10px;">
created by <a href="https://community.jboss.org/people/rhusar">Radoslav Husar</a> in <i>Performance Tuning</i> - <a href="https://community.jboss.org/message/751614#751614">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>It looks as though there is a problem with understanding of what chrome is saying. If you do the steps that you did, just look at the response headers:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><blockquote class="jive-quote"><p>HTTP/1.1 200 OK </p><p>Server: Apache-Coyote/1.1 </p><p>X-Powered-By: Servlet 2.5; JBoss-5.0/JBossWeb-2.1 </p><p>Accept-Ranges: bytes </p><p>ETag: W/"1406-1328876700000" </p><p>Last-Modified: Fri, 10 Feb 2012 12:25:00 GMT </p><p>Content-Type: text/html </p><p>Transfer-Encoding: chunked </p><p><strong>Content-Encoding: gzip </strong></p><p>Vary: Accept-Encoding </p><p>Date: Thu, 02 Aug 2012 08:18:12 GMT</p></blockquote><p>You see that the content is compressed with gzip.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>However, in chrome you will still see:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><blockquote class="jive-quote"><p>Your connection to localhost is encrypted with 128-bit encryption. </p><p>The connection uses TLS 1.0. </p><p>The connection is encrypted using AES_128_CBC, with SHA1 for message authentication and DHE_RSA as the key exchange mechanism. </p><p>The connection is not compressed.</p></blockquote><p>This is because chrome is talking about SSL stream-level compression. You can read some here <a class="jive-link-external-small" href="http://www.belshe.com/2010/11/18/ssl-compression-and-you/">http://www.belshe.com/2010/11/18/ssl-compression-and-you/</a></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Here is a small excerpt:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><blockquote class="jive-quote"><p>One aspect of <a class="jive-link-external-small" href="http://en.wikipedia.org/wiki/Secure_Sockets_Layer">SSL</a> which many people are not aware of is that SSL is capable of compressing the entire SSL stream.  The authors of SSL knew that if you’re going to encrypt data, you need to compress it before you encrypt it, since well-encrypted data tends to look pretty random and non-compressible. But even though SSL supports compression, no browsers support it.  Except Chrome 6 & later.</p><p>Generally, stream-level compression at the SSL layer is not ideal.  Since SSL doesn’t know what data it is transporting, and it could be transporting data which is already compressed, such as a JPG file, or GZIP content from your web site.  And double-compression is a waste of time.  Because of this, historically, no browsers compressed at the SSL layer – we all felt certain that our good brothers on the server side would solve this problem better, with more optimal compression.</p></blockquote><p>To enable this in JBoss/Tomcat you need to use jboss/tomcat natives (openssl).</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Rado</p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="https://community.jboss.org/message/751614#751614">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in Performance Tuning at <a href="https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2078">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>