- From: Marc Hadley via cvs-syncmail <cvsmail@w3.org>
- Date: Wed, 18 May 2005 18:35:00 +0000
- To: public-ws-addressing-eds@w3.org
Update of /sources/public/2004/ws/addressing
In directory hutz:/tmp/cvs-serv4164
Modified Files:
ws-addr-core.xml
Log Message:
Added lc74 resolution - added suggested security consideration
Index: ws-addr-core.xml
===================================================================
RCS file: /sources/public/2004/ws/addressing/ws-addr-core.xml,v
retrieving revision 1.78
retrieving revision 1.79
diff -C2 -d -r1.78 -r1.79
*** ws-addr-core.xml 18 May 2005 18:24:56 -0000 1.78
--- ws-addr-core.xml 18 May 2005 18:34:58 -0000 1.79
***************
*** 798,802 ****
for purposes of replay detection, the message identifier is combined with other
data, such as a timestamp, so that a legitimate retransmission of the message is not
! confused with a replay attack.</p>
</div1>
<div1 id="references">
--- 798,805 ----
for purposes of replay detection, the message identifier is combined with other
data, such as a timestamp, so that a legitimate retransmission of the message is not
! confused with a replay attack. It is also advisable to use message identifiers that are not
! predictable, to prevent attackers from constructing and sending
! an unsolicited reply to an outstanding request without having to
! see the actual request message.</p>
</div1>
<div1 id="references">
Received on Wednesday, 18 May 2005 18:38:25 UTC