The SPDY protocol must be disabled

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35765	DTBC-0018	SV-47052r2_rule	ECSC-1	Medium

Description
"Disables use of the SPDY protocol in Google Chrome. If this policy is enabled the SPDY protocol will not be available in Google Chrome. Setting this policy to disabled will allow the usage of SPDY. If this policy is left not set, SPDY will be available." - Google Chrome Administrators Policy List

STIG	Date
Google Chrome v24 Windows STIG	2013-02-21

Details

Check Text ( C-44110r1_chk )
Universal method (Requires Chrome Browser v15 or later): 1. In the omnibox (address bar) type chrome://policy 2. If DisableSpdy is not displayed under the Policy Name column or it is not set to true under the Policy Name column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DisableSpdy value name does not exist or its value data is not set to 1, then this is a finding.

Check Text ( C-44110r1_chk )

Universal method (Requires Chrome Browser v15 or later):
1. In the omnibox (address bar) type chrome://policy
2. If DisableSpdy is not displayed under the Policy Name column or it is not set to true under the Policy Name column, then this is a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the DisableSpdy value name does not exist or its value data is not set to 1, then this is a finding.

Fix Text (F-40311r1_fix)
Valid for Chrome Browser version 8 or later. Windows registry: Key Path: HKLM\Software\Policies\Google\Chrome\ Value Name: DisableSpdy Value Type: Boolean (REG_DWORD) Value Data: 1 Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Disable SPDY protocol Policy State: Enabled Policy Value: N/A