Obsolete due to security vulnerability.
Stream encryption via TLS (as defined in RFC 3920) and stream compression (as defined herein) are not mutually exclusive, but stream encryption via TLS MUST be negotiated before negotiation of stream compression in order to secure the stream.
-Many of the security considerations related to TLS compression (see Section 6 of RFC 3749) also apply to stream compression.
+Due to attacks like &CRIME; that apply equally to the zlib method defined here, this method is deemed insecure.
Obsolete due to security vulnerability.
The security considerations specified in XEP-0138 apply to usage of the LZW algorithm.
+Due to attacks like &CRIME; that apply equally to the lzw method defined here, this method is deemed insecure.