pirk-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tim Ellison (JIRA)" <j...@apache.org>
Subject [jira] [Created] (PIRK-45) Remove dependency on Java serialization
Date Tue, 09 Aug 2016 13:27:20 GMT
Tim Ellison created PIRK-45:
-------------------------------

             Summary: Remove dependency on Java serialization
                 Key: PIRK-45
                 URL: https://issues.apache.org/jira/browse/PIRK-45
             Project: PIRK
          Issue Type: Bug
            Reporter: Tim Ellison


Pirk should not depend upon Java serialization as a persistent object format.

Maintaining support for a variety of versions of Java serialized form can be difficult, this
includes both the querier and responder sides of a PIR.  Alternative formats such as XML and
JSON are more forgiving/extensible.

Furthermore, and despite Pirk's trust between querier and responder, there are potential implications
for loading the binary representation of Java's serialized instances as a vector for security
vulnerabilities.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message