UCF STIG Viewer Logo

The SPDY protocol must be disabled


Finding ID Version Rule ID IA Controls Severity
V-35765 DTBC-0018 SV-47052r1_rule ECSC-1 Medium
"Disables use of the SPDY protocol in Google Chrome. If this policy is enabled the SPDY protocol will not be available in Google Chrome. Setting this policy to disabled will allow the usage of SPDY. If this policy is left not set, SPDY will be available." - Google Chrome Administrators Policy List
Google Chrome v23 Windows STIG 2013-01-11


Check Text ( C-44110r1_chk )
Universal method (Requires Chrome Browser v15 or later):
1. In the omnibox (address bar) type chrome://policy
2. If DisableSpdy is not displayed under the Policy Name column or it is not set to true under the Policy Name column, then this is a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the DisableSpdy value name does not exist or its value data is not set to 1, then this is a finding.
Fix Text (F-40311r1_fix)
Valid for Chrome Browser version 8 or later.

Windows registry:
Key Path: HKLM\Software\Policies\Google\Chrome\
Value Name: DisableSpdy
Value Type: Boolean (REG_DWORD)
Value Data: 1

Windows group policy:
Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\
Policy Name: Disable SPDY protocol
Policy State: Enabled
Policy Value: N/A