[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Fwd: [e-lang] Protocol implementation errors

• To: Tyler Close <tyler@w...>
• Subject: Re: Fwd: [e-lang] Protocol implementation errors
• From: Rich Salz <rsalz@d...>
• Date: Fri, 03 Oct 2003 15:06:34 -0400
• Cc: xml-dev@l...
• In-reply-to: <E1A5UmM-0002vn-00@canteen> tests=EMAIL_ATTRIBUTION,FWD_MSG,IN_REP_TO,QUOTED_EMAIL_TEXT, REFERENCES,REPLY_WITH_QUOTES version=2.55
• References: <15725CF6AFE2F34DB8A5B4770B7334EE03F9ED55@h...> <E1A5Tr8-0002uw-00@canteen> <3F7DBBB8.9080802@d...> <E1A5UmM-0002vn-00@canteen> tests=EMAIL_ATTRIBUTION,FWD_MSG,IN_REP_TO,QUOTED_EMAIL_TEXT, REFERENCES,REPLY_WITH_QUOTES version=2.55
• User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4b) Gecko/20030507

> Are you saying it doesn't make sense to ask why ASN.1 has been
> vulnerable to long-lived bugs? We are not talking about just one
> bug in just one implementation.

In every case so far, it's been untested code paths.  As others have 
said, that's not ASN1/[BDPX]ER's fault.

> Using a technology without studying its past failures is not good
> engineering practice.

Thanks for the lesson.
	/r$

-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html

• Follow-Ups:
  • Re: Fwd: [e-lang] Protocol implementation errors
    • From: Tyler Close <tyler@w...>

• References:
  • RE: Fwd: [e-lang] Protocol implementation errors
    • From: "Bullard, Claude L (Len)" <clbullar@i...>
  • Re: Fwd: [e-lang] Protocol implementation errors
    • From: Tyler Close <tyler@w...>
  • Re: Fwd: [e-lang] Protocol implementation errors
    • From: Rich Salz <rsalz@d...>
  • Re: Fwd: [e-lang] Protocol implementation errors
    • From: Tyler Close <tyler@w...>

• Prev by Date: Re: Fwd: [e-lang] Protocol implementation errors
• Next by Date: RE: Fwd: [e-lang] Protocol implementation errors
• Previous by thread: Re: Fwd: [e-lang] Protocol implementation errors
• Next by thread: Re: Fwd: [e-lang] Protocol implementation errors
• Index(es):
  • Date
  • Thread