The SPDY protocol must be disabled

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-0018	DTBC-0018	SV-0018r1_rule		Medium

Description
Disables use of the SPDY protocol in Google Chrome. If this policy is enabled the SPDY protocol will not be available in Google Chrome. Setting this policy to disabled will allow the usage of SPDY. If this policy is left not set, SPDY will be available.

STIG	Date
Google Chrome STIG Draft	2012-09-25

Details

Check Text ( C-0018r1_chk )
Universal method (Requires Chrome Browser v15 or later): 1. In the omnibox (address bar) type chrome://policy 2. If DisableSpdy is displayed under the Policy Name column and it is set to true under the Policy Name column, then this is not a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DisableSpdy value name does not exist or its value data is not set to 1, then this is a finding.

Check Text ( C-0018r1_chk )

Universal method (Requires Chrome Browser v15 or later):
1. In the omnibox (address bar) type chrome://policy
2. If DisableSpdy is displayed under the Policy Name column and it is set to true under the Policy Name column, then this is not a finding.

Windows method:
1. Start regedit
2. Navigate to HKLM\Software\Policies\Google\Chrome\
3. If the DisableSpdy value name does not exist or its value data is not set to 1, then this is a finding.

Fix Text (F-0018r1_fix)
Valid for Chrome Browser version 8 or later. Windows registry: Key Path: HKLM\Software\Policies\Google\Chrome\ Value Name: DisableSpdy Value Type: Boolean (REG_DWORD) Value Data: 1 Windows group policy: Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Disable SPDY protocol Policy State: Enabled Policy Value: N/A