 Similarly, since 'no compression' must be allowed by all TLS clients, a server can always refuse to use compression., the CRIME exploit against SPDY and TLS-level compression was described as mitigated in the then-latest versions of the Chrome and Firefox web browsers.Some websites have applied countermeasures at their end.