ws-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <j...@apache.org>
Subject [jira] [Closed] (WSS-412) Unify error messages for the streaming code
Date Tue, 06 May 2014 09:11:45 GMT

     [ https://issues.apache.org/jira/browse/WSS-412?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Colm O hEigeartaigh closed WSS-412.
-----------------------------------


> Unify error messages for the streaming code
> -------------------------------------------
>
>                 Key: WSS-412
>                 URL: https://issues.apache.org/jira/browse/WSS-412
>             Project: WSS4J
>          Issue Type: Improvement
>            Reporter: Colm O hEigeartaigh
>            Assignee: Marc Giger
>             Fix For: 2.0.0
>
>
> This task is to unify error messages for the streaming code.  We must make sure that
no information leaks back to a potential attacker about where an exception was thrown in the
processing code. This particularly applies to whether an exception was thrown decrypting an
EncryptedKey, versus an EncryptedData structure that uses that key.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


Mime
View raw message