3 ms·
Lol. No offense, but I did a report in uni comparing a few alternatives (asn.1, json/xml over http, protobuf v1 (it's a while ago). And on one hand, sure asn.1
by e12e 5y ago
Lol. No offense, but I did a report in uni comparing a few alternatives (asn.1, json/xml over http, protobuf v1 (it's a while ago).
And on one hand, sure asn.1 exists, on the other there's been some issues in for example nfs. I don't think you want asn.1 today - but maybe cap'n'proto.
But i think redis is probably an interesting approach.
Not sure how many of these beyond whatever/http2 have a sane pipelining+authenticated encryption story? I suppose you could "dictate" security at the ip level via vpn/wireguard or something. Or use Unix sockets.
- __turbobrew__ 5y agoWhat are the problems with ASN.1? It seems to work in 5G and LTE just fine? ASN.1 is simply a way to have portable data structures — are your problems with ASN.1 that it cannot effectively implement portable data structures or is your problem with the systems that have been built upon ASN.1?
- e12e 5y agoI seem to recall the issue was with the tooling around generating clients and servers and preserving type information - but it's been almost 20 years and I don't have my notes on hand. I also think there were some nfs security issues relating to asn.1
- e12e 5y agoMight have been something along the lines of this: https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/dos/freebsd/nfsd/nfsd_mount https://www.infosecmatter.com/metasploit-module-library/?mm=... I guess that (and related errors in openssl and bouncy castle) might not be due to problems with asn.1 per se, but rather difficulty in writing safe libraries for parsing in C.