Skip to content

Commit

Permalink
Try to address Benjamin's comment about protecting sequences or their…
Browse files Browse the repository at this point in the history
… elements
  • Loading branch information
cabo committed Sep 25, 2019
1 parent b48be16 commit 0dcd3cf
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions draft-ietf-cbor-sequence.md
Expand Up @@ -242,6 +242,10 @@ of byte strings does need to be well-formed as such.
The security considerations of CBOR {{-cbor}} apply. This format
provides no cryptographic integrity protection of any kind, but can be
combined with security specifications such as COSE {{-cose}} to do so.
(COSE protections can be applied to an entire CBOR sequence or to each
of the elements of the sequence independently; in the latter case,
additional effort may be required if there is a need to protect the
relationship of the elements in the sequence.)

As usual, decoders must operate on input that is assumed to be
untrusted. This means that decoders must fail gracefully in the face
Expand Down

0 comments on commit 0dcd3cf

Please sign in to comment.