Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The SPDY protocol must be disabled
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35765 | DTBC-0018 | SV-47052r2_rule | ECSC-1 | Medium |
| Description |
|---|
| "Disables use of the SPDY protocol in Google Chrome. If this policy is enabled the SPDY protocol will not be available in Google Chrome. Setting this policy to disabled will allow the usage of SPDY. If this policy is left not set, SPDY will be available." - Google Chrome Administrators Policy List |
| STIG | Date |
|---|---|
| Google Chrome v24 Windows Benchmark | 2013-03-07 |
Details
| Check Text ( http://oval.mitre.org/XMLSchema/oval-definitions-5 ) |
|---|
| Universal method (Requires Chrome Browser v15 or later): 1. In the omnibox (address bar) type chrome://policy 2. If DisableSpdy is not displayed under the Policy Name column or it is not set to true under the Policy Name column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DisableSpdy value name does not exist or its value data is not set to 1, then this is a finding. |
| Fix Text (F-40311r1_fix) |
|---|
| Valid for Chrome Browser version 8 or later. Windows registry: Key Path: HKLM\Software\Policies\Google\Chrome\ Value Name: DisableSpdy Value Type: Boolean (REG_DWORD) Value Data: 1 Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Disable SPDY protocol Policy State: Enabled Policy Value: N/A |