[Webkit-unassigned] [Bug 168774] Add a test verifying cache deduplication is not sensitive to SHA1 collision attack

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 24 13:02:00 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=168774

--- Comment #38 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
(In reply to comment #36)
> >So maybe an idea is to instead of committing this pdf files with the sha1 collision as files, to embed them on the html of the test with base64?
> 
> AFAIU point of test was to have 2 different cached resources with equal
> SHA1. Embedding into HTML will break collision.

Another idea is to download the pdf files from somewhere before starting the test?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170224/3bdabbf9/attachment-0001.html>


More information about the webkit-unassigned mailing list