News for hackers. Stuff that matters.

A comment on It’s 255:19AM. Do you know what your validation criteria are?. Parent comment

Re:It’s 255:19AM. Do you know what your validation criteria ... by srfilipek on Tuesday October 06, 2020 @09:29AM (#24697438)
The article discusses interoperability issues; it isn't an attack or vulnerability.

The issue is that implementations will reject valid signatures.

[ Parent | on HN ]
Re:It’s 255:19AM. Do you know what your validation criteria ... by kelnage on Tuesday October 06, 2020 @09:43AM (#24697573)
Yeah, sorry, my wording wasn’t clear. I meant that attacks exist based on not utilising appropriate validation criteria (and, for example, libsodium’s more strict criteria do indeed prevent them).
[ Parent | on HN ]
Re:It’s 255:19AM. Do you know what your validation criteria ... by laksdjfkasljdf on Tuesday October 06, 2020 @03:47PM (#24701610)
Which attack(s) would that be?
[ Parent | on HN ]