This question already has an answer here:
- Is gzipping content via TLS allowed? 3 answers
After scaning web page with Nikto I have results that is "The Content-Encoding header is set to "deflate" this may mean that the server is vulnerable to the BREACH attack."
How to verify if that result isn't false positive? In proxy I don't see any Content-Encoding: deflate header.
Is it a good solution to always disable deflate encoding?