[jira] [Updated] (PIRK-45) Remove dependency on Java serialization

["Ellison Anne Williams (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/PIRK-45?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ellison Anne Williams updated PIRK-45:
--------------------------------------
    Assignee: Walter Ray-Dulany

> Remove dependency on Java serialization
> ---------------------------------------
>
>                 Key: PIRK-45
>                 URL: https://issues.apache.org/jira/browse/PIRK-45
>             Project: PIRK
>          Issue Type: Improvement
>            Reporter: Tim Ellison
>            Assignee: Walter Ray-Dulany
>
> Pirk should not depend upon Java serialization as a persistent object format.
> Maintaining support for a variety of versions of Java serialized form can be difficult, this includes both the querier and responder sides of a PIR.  Alternative formats such as XML and JSON are more forgiving/extensible.
> Furthermore, and despite Pirk's trust between querier and responder, there are potential implications for loading the binary representation of Java's serialized instances as a vector for security vulnerabilities.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)