ServiceRegistrar2, proxy trust and delayed unmarshalling

2013-01-09 Thread Peter Firmstone
An interesting point: Q: Unicast discovery can use JERI-SSL Endpoint's but is not subject to the unmarshalling attack, why not? A: It doesn't use unmarshalling, instead, the connection is authenticated before the proxy is downloaded. Discovery code already knows the interface to expect:

Re: ServiceRegistrar2, proxy trust and delayed unmarshalling

2013-01-09 Thread Gregg Wonderly
Okay, as a simple point, I am ultimately focused on how to get a LookupLocator to produce a ServiceRegistrar using something different that the existing UniCast mechanism. What I'm focused on, in thought, is just an implementation of that interface being created. When you look at the