Security advisory: Breach and Django
Switch off all GZIP..? That feels very extreme, I'm sure there are better workarounds than that one.<p>EDIT: The following workarounds should be very simple to implement and seem like more viable alternatives for production?<p><pre><code>  Length hiding (by adding random amount of bytes 
    to the responses)
  Rate-limiting the requests
</code></pre>
Mitigations 6 and 7 taken from <a href="http://breachattack.com/" rel="nofollow">http://breachattack.com/</a>