On Thu, Mar 03, 2016 at 02:00:31PM -0500, Jeffrey Walton wrote: > > Note that "no-comp" is a consequence of "zlib" and "zlib-dynamic" > > not being enabled. You have to choose to turn compression on IIRC > > by enabling one of these. > > no-comp disables compression independent of zlib. OPENSSL_NO_COMP will > be defined in the OpenSSL headers. Yes, it overrides these, and I was forgetting that there can perhaps be additional compression methods in play. So "no-comp" is reasonably sensible, unless you're supportting some application where TLS compression is both safe and required. -- Viktor.
