{"id":32506,"date":"2021-12-20T11:55:28","date_gmt":"2021-12-20T08:55:28","guid":{"rendered":"https:\/\/www.natro.com\/blog\/?p=32506"},"modified":"2021-12-20T11:55:30","modified_gmt":"2021-12-20T08:55:30","slug":"http-compression-header-nedir-faydalari-nelerdir","status":"publish","type":"post","link":"https:\/\/www.natro.com\/blog\/http-compression-header-nedir-faydalari-nelerdir\/","title":{"rendered":"HTTP Compression Header Nedir, Faydalar\u0131 Nelerdir?"},"content":{"rendered":"\n<p>\u201cHTTP Compression Header\u201d yani T\u00fcrk\u00e7e anlam\u0131yla \u201cHTTP Ba\u015fl\u0131k S\u0131k\u0131\u015ft\u0131rmas\u0131\u201d, web istemcileri ile web sunucular\u0131na yerle\u015ftirilebilen bir s\u0131k\u0131\u015ft\u0131rma y\u00f6ntemidir. HTTP s\u0131k\u0131\u015ft\u0131rmalar\u0131n amac\u0131 ise bant geni\u015fli\u011finin kullan\u0131m\u0131n\u0131 daha sa\u011fl\u0131kl\u0131 bir hale getirmek ve ekstradan da aktar\u0131m h\u0131zlar\u0131n\u0131 iyile\u015ftirmektir.<\/p>\n\n\n\n<p>Veriler, HTTP taraf\u0131ndan daha sunucudan g\u00f6nderilmeden \u00f6nce verilerin s\u0131k\u0131\u015ft\u0131rma i\u015flemi ba\u015flar ve son bulur. Bu verileri kar\u015f\u0131layacak olan taray\u0131c\u0131lar da (verilerle uyumlu olan taray\u0131c\u0131lar) verilerin do\u011fru bi\u00e7imini indirmeden \u00f6nce <strong>sunucu<\/strong> ile ileti\u015fime ge\u00e7er ve sunucuya hangi y\u00f6ntemlerin desteklendi\u011fini duyurur. E\u011fer uyumlu s\u0131k\u0131\u015ft\u0131rma y\u00f6ntemlerini taray\u0131c\u0131lar desteklemiyorsa, verilerin s\u0131k\u0131\u015ft\u0131r\u0131lmam\u0131\u015f olan halleri indirilir. S\u0131k\u0131\u015ft\u0131rma konusunda elde bulunan planlar\u0131n tam listesi de IANA taraf\u0131ndan sa\u011flan\u0131r. Yayg\u0131n bir bi\u00e7imde kullan\u0131lan s\u0131k\u0131\u015ft\u0131rma \u015femalar\u0131 ise genel olarak <strong>Brotli<\/strong> ve <strong>Gzip<\/strong>\u2019tir.<\/p>\n\n\n\n<p>HTTP\u2019de yap\u0131lacak olan s\u0131k\u0131\u015ft\u0131rmalar ad\u0131na \u201cdaha d\u00fc\u015f\u00fck bir seviye\u201d ve \u201cdaha y\u00fcksek bir seviye\u201d olmak \u00fczere iki farkl\u0131 yol bulunmaktad\u0131r. Daha d\u00fc\u015f\u00fck seviyede bir \u201cHTTP\u201d mesaj\u0131n\u0131n y\u00fck\u00fcn\u00fcn s\u0131k\u0131\u015ft\u0131r\u0131labilece\u011fini \u00f6rnek verirsek, daha y\u00fcksek bir seviyede i\u00e7in de bir i\u00e7erik kodlama ba\u015fl\u0131k alan\u0131n\u0131n, aktar\u0131lan bir verinin, ba\u015fka bir bi\u00e7imde ba\u015fvurulmu\u015f olan ya da \u00f6nbelle\u011fe al\u0131nm\u0131\u015f olan herhangi bir kayna\u011f\u0131n s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f olabilece\u011fini \u00f6rnek olarak sunabiliriz.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"979\" src=\"https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_77961914-1024x979.jpg\" alt=\"\" class=\"wp-image-32420\" srcset=\"https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_77961914-1024x979.jpg 1024w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_77961914-300x287.jpg 300w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_77961914-768x734.jpg 768w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_77961914-1536x1468.jpg 1536w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_77961914.jpg 1771w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>\u0130\u00e7erik kodlama, baz\u0131 taray\u0131c\u0131lar\u0131n, sunucularda bulunan hatalar\u0131n devreye girmesini \u00f6nlemek ad\u0131na Aktar\u0131m Kodlama\u2019s\u0131n\u0131n s\u0131k\u0131\u015ft\u0131rma deste\u011finin reklamlar\u0131n\u0131 yay\u0131nlamaz ve <strong>Aktar\u0131m Kodlama<\/strong>\u2019ya g\u00f6re daha yayg\u0131n bir bi\u00e7imde desteklenir.<\/p>\n\n\n\n<p>S\u0131k\u0131\u015ft\u0131rma \u015femas\u0131n\u0131 biraz daha detayland\u0131ral\u0131m. RFC 2616\u2019da yay\u0131nlanmas\u0131 ile birlikte anla\u015fmalar \u015fu iki ad\u0131mdan olu\u015fur:<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li>Daha \u00f6nce istemci ve sunuculardan bahsetmi\u015ftik. \u0130\u015fte bunlardan biri olan web istemcisi, istenmi\u015f olan HTTP ile belirtilen iste\u011fine belirte\u00e7 listesi ekler ve destekleyecek oldu\u011fu s\u0131k\u0131\u015ft\u0131rma \u015femalar\u0131n\u0131 payla\u015f\u0131r.<\/li><li>Sunucunun ise bir ya da birden fazla s\u0131k\u0131\u015ft\u0131rma temas\u0131na deste\u011fi varsa g\u00f6nderilen veriler bu sayede her iki taraf\u0131n da desteklemesi ile birlikte bir ya da daha fazla y\u00f6ntem kullan\u0131larak s\u0131k\u0131\u015ft\u0131r\u0131labilirler. Bu durumun sonucunda da sunucu, HTTP yan\u0131t\u0131nda kullan\u0131lm\u0131\u015f olan \u015femalar\u0131 virg\u00fclle ay\u0131rarak, bir adet aktarma kodlama alan\u0131 ya da i\u00e7erik kodlama alan\u0131 ekleyecektir.<\/li><\/ol>\n\n\n\n<p>Web sunucusu ne olursa olsun herhangi bir s\u0131k\u0131\u015ft\u0131rma y\u00f6ntemini se\u00e7erek kullanmak zorundad\u0131r.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-icerik-kodlama-belirtecleri\"><span id=\"icerik-kodlama-belirtecleri\"><strong>\u0130\u00e7erik Kodlama Belirte\u00e7leri<\/strong><\/span><\/h2>\n\n\n\n<p>Yukar\u0131daki paragrafta da bahsetmi\u015f oldu\u011fumuz \u00fczere IANA\u2019n\u0131n istemciler ve sunucular ad\u0131na listesinde bulundurdu\u011fu mevcut belirte\u00e7ler \u015funlard\u0131r:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Exi \u2013 W3C verimli bir XML de\u011fi\u015fim bi\u00e7imidir.<\/li><li>Pack200 \u2013 gzip \u2013 Java ar\u015fivleri ad\u0131na bir a\u011f aktar\u0131m bi\u00e7imidir.<\/li><li>Zstd \u2013 RFC 8478\u2019de tan\u0131mlanm\u0131\u015f olan Zstandart\u2019\u0131 s\u0131k\u0131\u015ft\u0131rma bi\u00e7imidir.<\/li><li><strong>Gzip \u2013 GNU<\/strong> zip format\u0131d\u0131r. S\u0131k\u0131\u015ft\u0131rma ad\u0131na s\u00f6nd\u00fcrme algoritmas\u0131n\u0131 kullan\u0131r. Ancak veri format\u0131 ile sa\u011flama toplam\u0131 algoritmas\u0131 olarak \u201cs\u00f6nd\u00fcrme\u201d i\u00e7erik kodlamas\u0131ndan farkl\u0131d\u0131r. Yine de bu y\u00f6ntem Mart 2011\u2019den itibaren en yayg\u0131n kullan\u0131ma ula\u015fan ve olduk\u00e7a desteklenen bi\u00e7imdir.<\/li><li><strong>Brotli (BR)<\/strong> \u2013 \u00f6zellikle HTTP i\u00e7eriklerinin kodlanabilmesi ad\u0131na tasarlanm\u0131\u015ft\u0131r ve RFC 7932\u2019de de tan\u0131mlanm\u0131\u015ft\u0131r. Bununla birlikte t\u00fcm modern ve b\u00fcy\u00fck taray\u0131c\u0131larda uygulanmaktad\u0131r. Bir s\u0131k\u0131\u015ft\u0131rma algoritmas\u0131 bi\u00e7imidir.<\/li><li>S\u0131k\u0131\u015ft\u0131r \u2013 UNIX \u201cs\u0131k\u0131\u015ft\u0131r\u201d program y\u00f6ntemi olan bir bi\u00e7imdir.<\/li><li>Deflate \u2013 Tarih\u00e7esi Deflate algoritmas\u0131na dayanan bir s\u0131k\u0131\u015ft\u0131rma bi\u00e7imidir.<\/li><\/ul>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Gzip s\u0131k\u0131\u015ft\u0131rmas\u0131 nedir, ne i\u015fe yarar \u00f6\u011frenmek i\u00e7in <strong><a href=\"https:\/\/www.natro.com\/blog\/gzip-nedir\/?utm_campaign=content&utm_medium=icerik&utm_source=hosting-blog&utm_content=\/blog\/http-compression-header-nedir-faydalari-nedir\" target=\"_blank\" rel=\"noreferrer noopener\">buraya<\/a><\/strong> t\u0131klayabilirsiniz.<\/p><\/blockquote>\n\n\n\n<p>Yukar\u0131daki i\u00e7erik kodlama belirte\u00e7lerine ek olarak, istemciler ya da sunucular taraf\u0131ndan bir dizi s\u0131radanla\u015ft\u0131r\u0131lmam\u0131\u015f ama resmi olmayan jetonlar kullan\u0131l\u0131r. Bunlar\u0131 da a\u015fa\u011f\u0131da bulabilirsiniz:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Bzip2 \u2013 Lighttpd taraf\u0131ndan desteklenmi\u015f ve \u00fccretsiz bzip2 format\u0131na dayal\u0131 olan s\u0131k\u0131\u015ft\u0131rma bi\u00e7imidir.<\/li><li>Izma \u2013 LZMA\u2019ya dayanan s\u0131k\u0131\u015ft\u0131rma bi\u00e7imidir. Opera 20\u2019de de derleme zaman\u0131 se\u00e7ene\u011fi arac\u0131l\u0131\u011f\u0131yla kulan\u0131c\u0131lar\u0131n be\u011fenisine sunulmaktad\u0131r.<\/li><li>Peerdist bi\u00e7imi.<\/li><li>Rsync \u2013 Bir \u00e7ift rpoxy proxy\u2019si taraf\u0131ndan uygulan\u0131ma sunulan bi\u00e7imdir.<\/li><li>Xpress \u2013 Windows ma\u011fazas\u0131 ile birlikte uygulama g\u00fcncellemeleri i\u00e7in de kullan\u0131ma sunulan bir Microsoft s\u0131k\u0131\u015ft\u0131rma bi\u00e7imidir. \u0130ste\u011fe ba\u011fl\u0131 bir bi\u00e7imde ger\u00e7ekle\u015ftirilir. Ayr\u0131ca, Huffman kodlamas\u0131 kullan\u0131larak da LZ77 tabanl\u0131 s\u0131k\u0131\u015ft\u0131rma bi\u00e7imi kullan\u0131labilir.<\/li><li>XZ \u2013 Resmi olmayan ve bir Firefox yamas\u0131 ile desteklenerek kullan\u0131lan LZMA2 tabanl\u0131 i\u00e7erik s\u0131k\u0131\u015ft\u0131rma bi\u00e7imidir.<\/li><\/ul>\n\n\n\n<p>H\u0131zl\u0131 bir site Brotli s\u0131k\u0131\u015ft\u0131rmas\u0131n\u0131 kullanabilirsiniz. Detayl\u0131 bilgiye <strong><a href=\"https:\/\/www.natro.com\/blog\/brotli-nedir-daha-hizli-bir-site-icin-brotli\/?utm_campaign=content&utm_medium=icerik&utm_source=hosting-blog&utm_content=\/blog\/http-compression-header-nedir-faydalari-nedir\" target=\"_blank\" rel=\"noreferrer noopener\">buradan<\/a><\/strong> ula\u015fabilirsiniz.<\/p>\n\n\n\n<h2 id=\"http-sikistirmasini-destekleyen-sunucular\" class=\"wp-block-heading\"><strong>HTTP S\u0131k\u0131\u015ft\u0131rmas\u0131n\u0131 Destekleyen Sunucular<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"682\" src=\"https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-1024x682.jpg\" alt=\"\" class=\"wp-image-26504\" srcset=\"https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-1024x682.jpg 1024w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-300x200.jpg 300w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-1536x1024.jpg 1536w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-270x180.jpg 270w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-370x245.jpg 370w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-768x512.jpg 768w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-360x240.jpg 360w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-545x363.jpg 545w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler-1600x1066.jpg 1600w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2018\/12\/SSL-Sertifikasi-Kurulumu-Hakkinda-Bilmeniz-Gerekenler.jpg 1688w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>\u0130\u00e7erik kodlama belirte\u00e7lerinden ve s\u0131k\u0131\u015ft\u0131rma listesinden bahsettikten sonra gelelim bahsetti\u011fimiz HTTP protokol\u00fc s\u0131k\u0131\u015ft\u0131rmalar\u0131na desteklerini sunan sunucu \u00e7e\u015fitlerine. Bu sunucu alternatifleri a\u015fa\u011f\u0131daki gibidir:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Microsoft ISS sunucusu<\/li><li>SAP NetWeaver sunucusu<\/li><li>Apache HTTP sunucusu<\/li><li>Cherokee HTTP sunucusu<\/li><li>Hiawatha HTTP sunucusu<\/li><li>Zeus Web sunucusu<\/li><li>Lighttpd sunucusu<\/li><li>Nginx sunucusu<\/li><li>Jetty sunucusu<\/li><li>GeoServer sunucusu<\/li><li>Apache Tomcat sunucusu<\/li><li>AOL sunucusu<\/li><li>IBM Websphere sunucusu<\/li><li>Ruby Rack sunucusu<\/li><li>HAProxy sunucusu<\/li><li>Varnish sunucusu<\/li><li>Armeria sunucusu<\/li><li>NaviServer sunucusu<\/li><li>Tornado tabanl\u0131 i\u015fleyen uygulamalar.<\/li><\/ul>\n\n\n\n<h2 id=\"http-sikistirmalarinin-guvenlige-etkileri\" class=\"wp-block-heading\"><strong>HTTP S\u0131k\u0131\u015ft\u0131rmalar\u0131n\u0131n G\u00fcvenli\u011fe Etkileri<\/strong><\/h2>\n\n\n\n<p>S\u0131k\u0131\u015ft\u0131rmalar, se\u00e7ilmi\u015f olan d\u00fcz metin sald\u0131r\u0131lar\u0131n\u0131n baz\u0131 bi\u00e7imlerinin ger\u00e7ekle\u015ftirilebilmelerine olanak tan\u0131r. E\u011fer ard niyetli bir kullan\u0131c\u0131n\u0131n yani bir sald\u0131rgan\u0131n, se\u00e7mi\u015f oldu\u011fu herhangi bir i\u00e7eri\u011fi var olan sayfaya enjekte etme giri\u015fimi ba\u015far\u0131 ile sonu\u00e7lan\u0131rsa, var olan \u015fifreli ak\u0131\u015flar\u0131n boyutlar\u0131nda da art\u0131\u015f g\u00f6zlemlenebilir. Bu da sayfan\u0131n verilen i\u00e7eri\u011fi kapsamad\u0131\u011f\u0131n\u0131n \u00f6\u011frenebilmesine olanak sa\u011flar. K\u00f6t\u00fc ama\u00e7l\u0131 kullan\u0131c\u0131lar taraf\u0131ndan rastgele enjeksiyonlar\u0131n ger\u00e7ekle\u015ftirilmesindeki art\u0131\u015f her ne kadar beklenenden az olsa bile s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f metinlerde tekrara d\u00fc\u015f\u00fclebilir. Bu da enjekte edilmi\u015f i\u00e7eriklerin gizli bilgi ile \u00f6rt\u00fc\u015fmesi anlam\u0131na gelir. Ard niyetli sald\u0131rganlar\u0131n su\u00e7lar\u0131n\u0131n arkas\u0131ndaki ana fikir de bu mekanizmaya dayan\u0131r.<\/p>\n\n\n\n<p>2012 y\u0131l\u0131nda \u201cCRIME\u201d ad\u0131n\u0131n verilmi\u015f oldu\u011fu veri s\u0131k\u0131\u015ft\u0131rma bi\u00e7iminde ger\u00e7ekle\u015ftirilen genel bir sald\u0131r\u0131 duyurusunda bulunuldu. Ger\u00e7ekle\u015ftirilen bu sald\u0131r\u0131, TLS de dahil olmak \u00fczere bir\u00e7ok protokolde etkili bir bi\u00e7imde \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131. Taray\u0131c\u0131 ve sunucularda her ne kadar TLS ve SPDY\u2019ye y\u00f6nelik ger\u00e7ekle\u015ftirilen istismarlar g\u00f6z \u00f6n\u00fcnde tutulsa ve bu istismarlar b\u00fcy\u00fck oranda hafifletildi. \u00d6te yandan CRIME\u2019\u0131n geli\u015ftiricileri, ke\u015ffedilen g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n SPDY ile TLS s\u0131k\u0131\u015ft\u0131rmalar\u0131n\u0131n birle\u015fimlerinden bile daha yayg\u0131n olabilecekleri konusunda uyar\u0131larda bulundular. Buna ra\u011fmen, HTTP s\u0131k\u0131\u015ft\u0131rmas\u0131na kar\u015f\u0131 ger\u00e7ekle\u015ftirilen su\u00e7 istismarlar\u0131 hi\u00e7bir \u015fekilde azalt\u0131lamam\u0131\u015ft\u0131r.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>TLS nedir, ne i\u015fe yarar detayl\u0131 olarak <strong><a href=\"https:\/\/www.natro.com\/blog\/transport-layer-security-tls-nedir\/?utm_campaign=content&utm_medium=icerik&utm_source=hosting-blog&utm_content=\/blog\/http-compression-header-nedir-faydalari-nedir\" target=\"_blank\" rel=\"noreferrer noopener\">buradan<\/a><\/strong> \u00f6\u011frenebilirsiniz.<\/p><\/blockquote>\n\n\n\n<p>Bir y\u0131l\u0131n ard\u0131ndan, 2013 y\u0131l\u0131nda kendilerini \u201c<strong>BREACH<\/strong>\u201d olarak adland\u0131ran bir grup, HTTP s\u0131k\u0131\u015ft\u0131rmas\u0131na kar\u015f\u0131 CRIME sald\u0131r\u0131n\u0131n yeni birer \u00f6rne\u011fini yay\u0131nlad\u0131. Ger\u00e7ekle\u015ftirilen bir BREACH sald\u0131r\u0131s\u0131 ile k\u00f6t\u00fc ama\u00e7l\u0131 kullan\u0131m ger\u00e7ekle\u015ftiren kullan\u0131c\u0131n\u0131n yani sald\u0131rgan\u0131n, kurban\u0131 art niyetli bir web ba\u011flant\u0131s\u0131n\u0131 ziyaret etmesi i\u00e7in kand\u0131rmas\u0131 \u00fczerine, TLS ile \u015fifrelenmi\u015f olan web trafi\u011finden de yararlanarak s\u0131ras\u0131yla; oturum a\u00e7ma belirte\u00e7leri, e-posta adresleri veya buna benzer \u00e7o\u011fu hassas bilgiyi de otuz saniye kadar k\u0131sa bir s\u00fcre i\u00e7erisinde elde edebilece\u011fini g\u00f6stermi\u015ftir.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"732\" src=\"https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_188776257-1024x732.jpg\" alt=\"\" class=\"wp-image-32440\" srcset=\"https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_188776257-1024x732.jpg 1024w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_188776257-300x214.jpg 300w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_188776257-768x549.jpg 768w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_188776257-1536x1097.jpg 1536w, https:\/\/www.natro.com\/blog\/wp-content\/uploads\/2021\/12\/dreamstime_m_188776257.jpg 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Kullan\u0131lm\u0131\u015f olan parolama algoritmas\u0131 ya da parolan\u0131n ne oldu\u011fu fark etmeksizin TLS ve SSL\u2019in t\u00fcm s\u00fcr\u00fcmleri, BREACH\u2019\u0131n riski ile tehlike alt\u0131ndad\u0131r. Daha \u00f6nce i\u015flenmi\u015f olan su\u00e7 \u00f6rneklerinden farkl\u0131 olarak da TLS s\u0131k\u0131\u015ft\u0131rmas\u0131n\u0131 ya da SPDY\u2019nin ba\u015fl\u0131k s\u0131k\u0131\u015ft\u0131rmalar\u0131n\u0131 kapatabilerek ba\u015far\u0131l\u0131 bir bi\u00e7imde savunabilen BREACH ise t\u00fcm web sunucu kullan\u0131c\u0131lar\u0131 ad\u0131na veri aktar\u0131m h\u0131zlar\u0131n\u0131 daha sa\u011fl\u0131kl\u0131 bir hale getirmeyi hedefler. Bu do\u011frultuda HTTP s\u0131k\u0131\u015ft\u0131rmas\u0131ndan yararlan\u0131l\u0131r.<\/p>\n\n\n\n<h2 id=\"http-compression-header-faydalari-nelerdir\" class=\"wp-block-heading\"><strong>HTTP Compression Header Faydalar\u0131 Nelerdir?<\/strong><\/h2>\n\n\n\n<p>Yukar\u0131da da bahesildi\u011fi \u00fczere \u201cHTTP Compression Header\u201d\u0131n birden fazla faydas\u0131 bulunmaktad\u0131r. Bunlardan en \u00f6nemlisi ve g\u00f6zle g\u00f6r\u00fclebilir olan\u0131; <strong>istemciler ve sunucular aras\u0131ndaki h\u0131zl\u0131 ve sa\u011fl\u0131kl\u0131 ileti\u015fimi sa\u011flanmas\u0131d\u0131r<\/strong>. Tespit edilen bir di\u011fer fayda ise k\u00f6t\u00fc ama\u00e7l\u0131 kullan\u0131c\u0131lar\u0131n sald\u0131r\u0131lar\u0131na kar\u015f\u0131 sa\u011flad\u0131\u011f\u0131 g\u00fcvenlik \u00f6nlemleri olmu\u015ftur.\u00a0HTTP s\u0131k\u0131\u015ft\u0131rma y\u00f6ntemi i\u00e7eri\u011fin sunucudan ayr\u0131lmadan \u00f6nce s\u0131k\u0131\u015ft\u0131r\u0131lmas\u0131na olanak tan\u0131r. Dolay\u0131s\u0131yla mesaj\u0131n boyutlar\u0131 azal\u0131r ve a\u011fdaki <strong>bant geni\u015fli\u011fi <\/strong>gereksinimi azal\u0131r. Bu sebeple de veriyi indirme s\u00fcresi de d\u00fc\u015fer. Yani veri transferi h\u0131zlanm\u0131\u015f olur.<\/p>\n","protected":false},"excerpt":{"rendered":"\u201cHTTP Compression Header\u201d yani T\u00fcrk\u00e7e anlam\u0131yla \u201cHTTP Ba\u015fl\u0131k S\u0131k\u0131\u015ft\u0131rmas\u0131\u201d, web istemcileri ile web sunucular\u0131na yerle\u015ftirilebilen bir s\u0131k\u0131\u015ft\u0131rma y\u00f6ntemidir.&hellip;\n","protected":false},"author":7,"featured_media":13066,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[],"class_list":{"0":"post-32506","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-sunucu"},"_links":{"self":[{"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/posts\/32506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/comments?post=32506"}],"version-history":[{"count":1,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/posts\/32506\/revisions"}],"predecessor-version":[{"id":32507,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/posts\/32506\/revisions\/32507"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/media\/13066"}],"wp:attachment":[{"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/media?parent=32506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/categories?post=32506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.natro.com\/blog\/wp-json\/wp\/v2\/tags?post=32506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}