CRIME is an interesting approach to leak information being protected by SSL/TLS. It is an easy to understand/explain example of why security issues are nearly always more complex than they seem!
heliod uses NSS, which by default has TLS compression disabled so it is not vulnerable.