ravthan / all-eyes

Automatically exported from code.google.com/p/all-eyes
0 stars 0 forks source link

security risk - there is no non-repudiation - mitigation is issue #7 #90

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Right now, the event messages are not signed by monitors/SSL clients.  This 
must be added to cover this security issue,
ravi.

Original issue reported on code.google.com by ravt...@gmail.com on 20 Nov 2012 at 2:10

GoogleCodeExporter commented 8 years ago

Original comment by ravt...@gmail.com on 20 Nov 2012 at 3:00

GoogleCodeExporter commented 8 years ago

Original comment by ravt...@gmail.com on 20 Nov 2012 at 3:51

GoogleCodeExporter commented 8 years ago
This security risk is mitigated by the task #7.
Hence marking this a duplicate of #7.

To make sure the importance of security issues are not lost, I will be raising 
the the priority of issue #7, with security tag,
ravi.

Original comment by ravt...@gmail.com on 21 Nov 2012 at 3:27

GoogleCodeExporter commented 8 years ago
Verified with unit testing

Original comment by tbrt....@gmail.com on 9 Dec 2012 at 9:24