On: Defending a website with Zip bombs

[colanderman]

No, Accept-Encoding pairs with Content-Encoding, not Transfer-Encoding (which is controlled by TE as GP indicated). [1] [2]

[1] https://tools.ietf.org/html/rfc7231#section-5.3.4

[2] https://tools.ietf.org/html/rfc7230#section-4.3

[mnarayan01 → colanderman]

Bah I can't read...you two are correct.