Howard, Although I'm with Massimo on the random HMAC pass phrase, I don't think the question should hold up a release. Having *some* HMAC solution in place soon is important.
I should be committing a few minor javadoc changes this weekend (finishing up TAP5-1735, the "package-info.java" files), but if you're in a hurry don't wait for me. On Thu, Oct 4, 2012 at 6:24 PM, Massimo Lusetti <[email protected]> wrote: > On Fri, Oct 5, 2012 at 12:18 AM, Howard Lewis Ship <[email protected]> wrote: > >> I think it might be time for a 5.3.6. This is what I'm showing as fixed: > >> * [TAP5-2008] - Serialized object data stored on the client should >> be HMAC signed and validated > > Please read my other on the HMAC signature before start the release. > > Cheers > -- > Massimo > http://meridio.blogspot.com > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
