In this answer, @Thomas Pornin talks about remediating the CRIME attack and says:
Suppose my website serves content from two HTTPS URLs:
secure.company.com and images will be hosted at
cdn.differentTLD.net. Note that I'm using different domains so no authentication cookies will be sent or validated. Also assume that this CDN holds static files and no authentication will be done.
- Is it safe to enable TLS Compression only for the CDN?
I understand that @D.W. and @PulpSpy's answer can infer which file is being downloaded based on their post below.
That being said, can a lower-level TLS "secret" be exposed outside of the data that is in the HTTP protocol? (In the CRIME attack we seem to only talk about getting the cookie in the header)
Can any data gained from a CRIME exploit against the CDN be used against the other domain?