This is classic young-person-fails-to-understand-venerable-standard-so-he-reimplements-half-of-it. Messagepack is schemaless and noncanonical. What that means

This is classic young-person-fails-to-understand-venerable-standard-so-he-reimplements-half-of-it. Messagepack is schemaless and noncanonical. What that means is that a lot of the bounds/field checking is pushed up to the application layer. I wouldn't encode crypto with that (and I love Messagepack). All the hate for ASN.1, yet it is among the most battle-tested specifications out there. Blaming ASN.1 for the shitty ASN.1 parsers written in the 80's and 90's is like blaming libsocket for all the network attacks.