Hacker News new | ask | show | jobs
by fourfourthree 1406 days ago
I'd be really curious to hear the security discussion around S3 compression, or if they added any additional mitigations. Compressing data and then encrypting it will be vulnerable to a padding oracle attack[1].

[1] https://en.m.wikipedia.org/wiki/CRIME