News for hackers. Stuff that matters.
Re:Give Me Back My Monolith by jcims on Wednesday March 13, 2019 @06:52PM (#19384775)
I always wondered why ASN.1 never really seemed to take off. Tooling maybe?
Re:Give Me Back My Monolith by acdha on Wednesday March 13, 2019 @07:10PM (#19384911)
Yes - both the protocol and tooling are expensive to support, even by 90s standards. Unless you have to use it for compatibility with a service you can’t fix it’d be much better to start with a better implementation of the concept.
Re:Give Me Back My Monolith by throwaway2048 on Wednesday March 13, 2019 @08:49PM (#19385501)
ASN.1 has a number of problems with equivalent parsings (very bad in a security context, has been the source of a number of TLS vulnerabilities), as well as the fact that even discovering if two ASN.1 parsers will give the same result is undecidable.