4 ms·
- Structured data instead of always somewhat wonky text formats - Request-reply -- Acknowledge stuff. Especially when it's security relevant - For security re
by throwawayish 10y ago
- Structured data instead of always somewhat wonky text formats
- Request-reply -- Acknowledge stuff. Especially when it's security relevant
- For security relevant stuff, don't just silently fail or fall back to some idiot default. Eg. say a command message for setting a password doesn't contain the password field -- then fail the request, don't assume an empty password.
(Ie. be liberal about what you accept but not too liberal)
- tinus_hn 10y agoYou shouldn't be liberal at all if security is a concern. You should be strict, use a well defined format and refuse anything that doesn't comply. It isn't difficult to be strict so being liberal is just asking for trouble uselessly.