#1 new
Gaius Centus Novus

New middleware: PadForSecurity

Reported by Gaius Centus Novus | June 3rd, 2009 @ 05:05 PM

I've added a PadForSecurity middleware. The use case is for developers who are generating content that will eventually be encrypted before being sent out. Some encryption algorithms are weakened by any static subset of the plaintext appearing at a block boundary. It pads spaces (configurable) onto the beginning or end of responses that won't be corrupted by the padding.

Links:

Comments and changes to this ticket

  • Gaius Centus Novus

    Gaius Centus Novus June 3rd, 2009 @ 05:07 PM

    Just as I was typing this up I realized a problem: XML doesn't want extra spaces at the beginning. Any suggestions on a clean way to put them right before <body or <html without binding too closely to the MIME type?

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

People watching this ticket

Pages