New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

response compression #4614

Open

reubenelder opened this issue Sep 16, 2024 · 1 comment

Labels

Question

reubenelder commented Sep 16, 2024

Hi,

Unless I'm missing something I don't think there is any response compression in the FHIR server. Are there plans to support this?

Thanks,
Reuben

reubenelder added the Question label

Member

brendankowitz commented Sep 19, 2024

There are security considerations to review when enabling both SSL + Compression.

Compressed responses over secure connections can be controlled with the EnableForHttps option, which is disabled by default because of the security risk. Using compression with dynamically generated pages can expose the app to CRIME and BREACH attacks.

from: https://learn.microsoft.com/en-us/aspnet/core/performance/response-compression?view=aspnetcore-8.0#compression-with-https

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment