On 05/27/13 20:10, Jim Starkey wrote:

> Is the attach package encrypted with the session key?  If so, the hash
> of the session key isn't necessary.  If not, the exchange is susceptible
> to a man-in-the-middle attack with a buggered DPB.
>

Hops...
Though such attack looks at the first glance just theoretically 
possible, that should be fixed.


------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to