Re: Problems with implementation - DoS attacks possible

On Thu, 23 Jan 2003, Marcus Leech wrote:

> I *think* that what you're saying here is that the document needs to specify
>   reasonable upper bounds for the number of key disclosures.  I don't think that
>   we need to say "must contain exactly 'N'".

Exactly. This is what I think :)


>   The key disclosure list element
>   (Tag=0x0D) is optional, so when you don't have any keys to disclose, you
>   don't include the list.  Perhaps the wording should make this clear.

I didn't notice it. Shame on me.