4 ms·
You're not accounting for the incorrectly rejected file / protocols. And incomplete protocol specifications. And generally I think critics of Postel are lacki
by emmelaich 1y ago
You're not accounting for the incorrectly rejected file / protocols. And incomplete protocol specifications.
And generally I think critics of Postel are lacking the context in which they were made. You and probably others would actually make similar decisions than Postel for many particular issues.
- SAI_Peregrinus 1y agoI disagree that I'd make similar decisions. Postel's Law is a big part of the reason Bleichenbacher attacks (adaptive chosen-ciphertext attacks)[1] stayed so common for so long. As an engineer responsible for the security I absolutely reject malformed inputs. https://en.wikipedia.org/wiki/Adaptive_chosen-ciphertext_attack https://en.wikipedia.org/wiki/Adaptive_chosen-ciphertext_att...
- emmelaich 1y agoBut that's what I'm saying; Postel may well have ALSO rejected malformed inputs in this particular case.