[Home] [By Thread] [By Date] [Recent Entries]

  • To: 'Tyler Close' <tyler@w...>, xml-dev@l...
  • Subject: RE: Fwd: [e-lang] Protocol implementation errors
  • From: "Bullard, Claude L (Len)" <clbullar@i...>
  • Date: Fri, 3 Oct 2003 10:48:41 -0500

Ok.  What precisely about ASN.1 poses security 
problems beyond the implementation?  I'm surprised 
to hear that.  ASN.1 has been around for a long 
time.

len

-----Original Message-----
From: Tyler Close [mailto:tyler@w...]

On Friday 03 October 2003 10:32, Bullard, Claude L (Len) wrote:
> The first step will be to learn to dampen
> Spy Vs Spy arguments with regards to who
> has the safest system in situations where
> it is the coding culture that is at issue.

The point of the original post is that ASN.1 posed problems even
in a coding culture that is, and has been, highly attuned to
security issues.

Dismissing this data point as merely the results of sloppy
programming seems dubious. There are likely greater lessons to be
learned here.

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member