Source: ea-nginx-gzip
Section: EA4
Priority: optional
Maintainer: cPanel
Homepage: http://www.cpanel.net

Package: ea-nginx-gzip
Architecture: any
Depends: ea-nginx
Description: Enable gzip config for ea-nginx
 Makes ea-nginx configure gzip compression.
 per NGINX (http://nginx.org/en/docs/http/ngx_http_gzip_module.html):
     - When using the SSL/TLS protocol, compressed responses may be subject to BREACH attacks.
     - https://en.wikipedia.org/wiki/BREACH
 The best mitigation (besides not using compression at all) is:
     1. Not sending sensitive data as part of your HTTP response
     2. Use strict samesite cookies
        - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
 If that is not an acceptable risk please uninstall `ea-nginx-gzip`

