News for hackers. Stuff that matters.

A comment on Cryptic Rumblings Ahead of First 2020 Patch Tuesday. Parent comment

Re:Cryptic Rumblings Ahead of First 2020 Patch Tuesday by cjbprime on Tuesday January 14, 2020 @02:08AM (#22042539)
> Do we know that MS TLS implementation parses self-signed certs only after successful validation?

It would be a contradiction in terms. You can't validate the semantic content of a file before you've parsed it!

[ Parent | on HN ]
Re:Cryptic Rumblings Ahead of First 2020 Patch Tuesday by fulafel on Tuesday January 14, 2020 @04:51AM (#22043310)
Yeah, I should have said "before it processes any other fields". The ASN.1 parse of course comes first.
[ Parent | on HN ]