Re: [go-nuts] Re: First time building a rest-api-based web app: general security-related questions

2018-01-25 Thread Jeffrey Goldberg
lish that, but its on our wishlist of stuff we would someday like to publish. Cheers, -j –- Jeffrey Goldberg Chief Defender Against the Dark Arts @ AgileBits https://1password.com -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To

Re: [go-nuts] base32 DecodeLen() miscalculation when no padding

2017-12-12 Thread Jeffrey Goldberg
> On Dec 12, 2017, at 9:00 AM, Ian Lance Taylor wrote: > DecodedLen is supposed to be applied to the length of the encoded > data. RFC 4648 says that the encoded data must be padded to be a > multiple of 8 bytes. Yet encoding/hash32 defines a NoPadding constant, the code is filled with tests