Should tor-spec say that nodes MUST NOT use TLS compression?
In general, it's unsafe to compress attacker-controlled data and secret data together in the same blocks, because attackers can use compressed data size to discover the secret (as in the CRIME attack).
Discovered as part of #22948 (moved).