[Cryptography] Is ASN.1 still the thing?

[James A. Donald]

MsgPack is binary, and modules for every language and environment you 
have ever heard of, and library code to do anything you want, but it is 
all dynamically typed, which means it is not as efficient as PER

It is basically YAML in binary, in that MsgPack messages correspond 
closely to YAML documents.  Because it supports every language, you can 
use MsgPack to talk C++ to node.js, and YAML to talk to humans.

Dynamic typing means that a hostile evil program could send no end of 
messages that your program is not equipped to deal with.  The great 
thing about PER is that anything that you are not expecting just gets 
magically rejected.

Both of them totally punt on the issue of protocol negotiation, whereas 
Avro apache has support for protocol negotiation.  It combines static 
and dynamic typing, but dynamic requires both sides to play nice.  Evil 
program with surprise data structures will just have the connection shut 
down on it.

But I don't see that Avro Apache can talk to node.js, in part because it 
it wisely refuses to be fully dynamic.

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus