Re: Signed RSL from Apache

[Alex Harui]

On 2/20/12 3:51 PM, "arielj...@yahoo.com" <arielj...@yahoo.com> wrote:

> Can we program the loader to pull the hash from a URL via ssl?
There are lots of possibilities.  Basically, if you are fetching the answer
to a question, you allow both the question and answer to be hacked to get
any answer you want.  It will never be as secure as the current mechanism,
but it might be good enough.  However, I still want to see the need for
startup time RSLs to go away.

I'm not sure how you would use SSL.  Via a socket? Or https?  There might be
browser limitations on it.

-- 
Alex Harui
Flex SDK Team
Adobe Systems, Inc.
http://blogs.adobe.com/aharui