Huh. I was hoping to look at (ab)using HTTP compression for crawler mitigation, but are CRIME/BREACH exploits still requiring us to not compress HTTPS?