> I have an SSL session in which the client and server has negotiated for
> cipherSuite SSL_RSA_WITH_RC4_128_MD5
> compressionMethod zlib-compression
>
> Now, is the zlib-compression applied before encryption or after ?
>
> data -> zlib-compression -> encryption ======> decrypt ->
> zlib->inflate-> data
>
> or
>
> data -> encryption -> zlib-compression ======> zlib->inflate-> decrypt
> -> data
>


Considering encrypted data, by nature, should not be predictable,
and therefore not compressible, your second listing would not be
logical.

-Brad

__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majordomo@openssl.org