You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2014/05/06 11:11:45 UTC
[jira] [Closed] (WSS-412) Unify error messages for the streaming
code
[ https://issues.apache.org/jira/browse/WSS-412?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh closed WSS-412.
-----------------------------------
> Unify error messages for the streaming code
> -------------------------------------------
>
> Key: WSS-412
> URL: https://issues.apache.org/jira/browse/WSS-412
> Project: WSS4J
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Marc Giger
> Fix For: 2.0.0
>
>
> This task is to unify error messages for the streaming code. We must make sure that no information leaks back to a potential attacker about where an exception was thrown in the processing code. This particularly applies to whether an exception was thrown decrypting an EncryptedKey, versus an EncryptedData structure that uses that key.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org