Hi,

I have some questions for the group:

1. Does a threat model for OpenXPKI exist and if so, can it be shared? I
recently created one myself and would be happy to share if anyone is
interested. It would be interesting to compare it to any existing ones to
see how I did :)

2. Has OpenXPKI been pen tested, and if so, can you share the results or at
least the high level overview?

3. Does OpenXPKI do any input validation to mitigate XSS and/or SQLi?

Thank you for your time!
-Arthur Hewitt
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to