Hi! 馃憢
I'd like to thank everyone who has ever worked on this library, as it has helped me build things I wouldn't have built otherwise.
Because I like it so much, I must tell you that I noticed some security issues which I believe could be avoided if the API was simpler.
I'd like to propose adding a high-level API that makes our apps harder to hack. Here's how it'd look:
node = getTheOnlySignedNodeOrNull(xml, publicKey)
and
nodesArray = getSignedNodes(xml, publicKey)
You can read the rationale behind it in this blog post - Your XML security library is sabotaging your work. Here's what you can do about it. It's evident verifying signatures poses a real challenge. An example is described in a post titled Are XML Signatures secure?.
The current, low-level API doesn't have to be removed, so everything can be backward-compatible.
The new, safer API can be built on top of the existing one.
Should we help developers deliver secure solutions?
Hi! 馃憢
I'd like to thank everyone who has ever worked on this library, as it has helped me build things I wouldn't have built otherwise.
Because I like it so much, I must tell you that I noticed some security issues which I believe could be avoided if the API was simpler.
I'd like to propose adding a high-level API that makes our apps harder to hack. Here's how it'd look:
and
You can read the rationale behind it in this blog post - Your XML security library is sabotaging your work. Here's what you can do about it. It's evident verifying signatures poses a real challenge. An example is described in a post titled Are XML Signatures secure?.
The current, low-level API doesn't have to be removed, so everything can be backward-compatible.
The new, safer API can be built on top of the existing one.
Should we help developers deliver secure solutions?