php/php-src — pull request #269 by rdlowrey (2013-01-30 19:50:13+00:00)
Title: New SSL stream context option to prevent CRIME attack vector

The CRIME attack vector exploits TLS compression. This patch adds a stream context option allowing servers to disable TLS compression for versions of OpenSSL >= 1.0.0 (which first introduced the SSL_OP_NO_COMPRESSION option). A summary rundown of the CRIME attack can be found here:
https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls

Thanks to @DaveRandom for locating the relevant section of code and for his sage input on the subject.