You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ws.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2012/11/27 11:23:57 UTC

[jira] [Created] (WSS-412) Unify error messages for the streaming code

Colm O hEigeartaigh created WSS-412:
---------------------------------------

             Summary: Unify error messages for the streaming code
                 Key: WSS-412
                 URL: https://issues.apache.org/jira/browse/WSS-412
             Project: WSS4J
          Issue Type: Improvement
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 2.0



This task is to unify error messages for the streaming code.  We must make sure that no information leaks back to a potential attacker about where an exception was thrown in the processing code. This particularly applies to whether an exception was thrown decrypting an EncryptedKey, versus an EncryptedData structure that uses that key.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org