News for hackers. Stuff that matters.

A comment on Millions of accounts compromised because there is no specialised user database. Parent comment

Re:Millions of accounts compromised because there is no spec... by halostatue on Tuesday April 21, 2015 @10:42PM (#9418414)
True, but having been involved in the development of an LDAP client, LDAP is a horribly complex system to implement against (and its built on top of ASN.1, which is possibly worse) and it was slow to get security features (LDAPS, etc.)—and in many cases, no two LDAP servers work quite the same (the most common LDAP server, ActiveDirectory, is the worst for this).

There is a need for something secure by default that is easy to use, easy to set up, easy to deploy, etc. Where this will be difficult is https://xkcd.com/927/.

[ Parent | on HN ]
Re:Millions of accounts compromised because there is no spec... by whoopdedo on Tuesday April 21, 2015 @11:34PM (#9418535)
I've always wondered when I hear someone complain about the complexity, then where did it get the 'L' in its name from?
[ Parent | on HN ]
Re:Millions of accounts compromised because there is no spec... by wmf on Tuesday April 21, 2015 @11:44PM (#9418564)
AFAIK LDAP is a simplified version of X.400, which was part of the truly horrible ISO protocol stack.
[ Parent | on HN ]