Avoid header compression, or, Configure TLS/SSL to prevent an attack called �Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext� (BREACH).