[
Lists Home |
Date Index |
Thread Index
]
Ok. What precisely about ASN.1 poses security
problems beyond the implementation? I'm surprised
to hear that. ASN.1 has been around for a long
time.
len
-----Original Message-----
From: Tyler Close [mailto:tyler@waterken.com]
On Friday 03 October 2003 10:32, Bullard, Claude L (Len) wrote:
> The first step will be to learn to dampen
> Spy Vs Spy arguments with regards to who
> has the safest system in situations where
> it is the coding culture that is at issue.
The point of the original post is that ASN.1 posed problems even
in a coding culture that is, and has been, highly attuned to
security issues.
Dismissing this data point as merely the results of sloppy
programming seems dubious. There are likely greater lessons to be
learned here.
|
