Re: XML tag encryption?

[Eric Rescorla <ekr () rtfm com>]

"Steven M. Bellovin" <smb () research att com> writes:
> Apart from the fact that most developers will pick such tags -- and the 
> fact that an enemy could launch a known plaintext attack to figure out 
> what fields are what, in your specific example I should point out that 
> credit card numbers are self-checking and thus easily recognizable.
A friend of mine talked to these guys at XML One and reports that
actually they're encrypting elements, not just tags--though
you wouldn't know it from the article.

-Ekr

-- 
[Eric Rescorla                                   ekr () rtfm com]
                http://www.rtfm.com/
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards