Tim Ellison created PIRK-45:
-------------------------------
Summary: Remove dependency on Java serialization
Key: PIRK-45
URL: https://issues.apache.org/jira/browse/PIRK-45
Project: PIRK
Issue Type: Bug
Reporter: Tim Ellison
Pirk should not depend upon Java serialization as a persistent object format.
Maintaining support for a variety of versions of Java serialized form can be
difficult, this includes both the querier and responder sides of a PIR.
Alternative formats such as XML and JSON are more forgiving/extensible.
Furthermore, and despite Pirk's trust between querier and responder, there are
potential implications for loading the binary representation of Java's
serialized instances as a vector for security vulnerabilities.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
