ietf-mxcomp
[Top] [All Lists]

Re: ASN.1 as encoding (was: Designing and Allocating a new RR type)

2004-06-24 09:52:17

On Thu, Jun 24, 2004, Hadmut Danisch wrote:

- ASN.1 encoded data only
- ASN.1 tagged with a OID for unambigous identification
 of the content type

Hmm, people are discussing possible security problems due to the
use of XML. What about ASN.1? It seems that writing a parser for
it is not trivial; just look at some OpenSSL security advisories:

    o Security: fix vulnerabilities in ASN.1 parsing
      CAN-2003-0543, CAN-2003-0544                            [0.9.7c & 0.9.6k]
    o Security: fix additional vulnerability in ASN.1 parsing
      CAN-2003-0545                                                    [0.9.7c]


<Prev in Thread] Current Thread [Next in Thread>