Major Flaw In XML Encryption Standard Comes To Light

November 01, 2011

Major Flaw In XML Encryption Standard Comes To Light By Qushawn Clark It looks like its time to really tighten up your XML implementations to stop all other types of attacks, because researchers say "there is no simple patch for this problem." As anyone who would read this would know, XML is a hugely popular way to encrypt data being transferred over the Internet. Back in 2002, W3C standardized the encryption system and many companies now offer open-source and commercial frameworks that can be easily implemented. The researchers who found the problem, Juraj Somorovsky and Tibor Jager from Ruhr-University Bochum in Germany, reported in their paper that "they were able to decrypt data by sending modified ciphertexts to the server, by gathering information from the received error messages." They also see it a such an important issue because "It is employed in a large number of major web-based applications, ranging from business communications, e-commerce, and financial solutions." Continue Reading

Performance Monitoring Software for Websites, Servers and Infrastructure Download your FREE 14-day evaluation of WebWatchBot and begin experiencing the benefits of reliable monitoring today.

Today's Top Videos: Conduit Partnering to Better Engage Publishers Conduit is continuing to build partnerships in order to increase engagement for its publishers. The company recently partnered with Microsoft's Bing and also Miniclip to offer... Watch Video What's Up With Google's Move To Encrypt Search? Last week, Google announced that it would begin encrypting search queries by default for some searches on Google.com. This means that search marketers will not be able to receive... Watch Video Content Is Everything, Says C.C. Chapman Everyone has heard the cliche that content is king. Is that the best way to describe it though? WebProNews recently spoke with C.C. Chapman of Digital Dads who told us that he tries to... Watch Video Recent Articles: Popular XML Editors To Choose From For those of you out there looking for a professional XML editor, here a short list of some of the most popular ones at the moment. Oxygen XML Editor – this is definitely one of the most popular and feature heavy of the XML editors out there. It is supported on all three of the major platforms, has an XSLT debugger, and also can be run as a plugin for Eclipse (which is hugely popular itself). It also has the ability to edit files other than XML and XSL files such as CSS and HTML files, which would be very handy, given the typical usage for XML files in web environments. Read More... Open Office XML: Formatting Text... Building a plain text document is something we can do via the wonderful .txt file. However, if we're taking the time to use the Open Office XML format, specifically the WordprocessinML format, we want to be able to... Read More... In Favor of JSON Over XML We have written before advocating XML over JSON and discussed why they can't be friends. The times are changing and technologies like XML as well as others like MySQL that have been standards for years have... Read More... How to Parse Large Files With PHP PHP has great tools built in for parsing XML files. SimpleXML is perfect most anything, especially XHR responses, but is too resource intensive for large files. There are no easy solutions for parsing large files, and... Read More...

Other iEntry Business Resources: WebProNews.com Jayde.com MarketingNewz.com SalesNewz.com CareerNewz.com InvestNewz.com eCommNewz.com WebsiteNotes.com AdvertisingDay.com

--This email is a service of XMLProNews-- iEntry, Inc. 2549 Richmond Rd. Lexington KY, 40509 2011 iEntry, Inc. All Rights Reserved Privacy Policy Legal

XMLProNews: Deactivate / For other inquiries: support@ientry.com

Posted in: