Comment on 'Padding Oracle' Crypto Attack Affects Millions of ASP.NET AppsparentComments−brl15yAs somebody who is familiar with some details of the vulnerability, I can assure you that the error reporting configuration is irrelevant.The HTTP response code is the only information needed for the attack.200 vs. 500 vs. 404
Comments
As somebody who is familiar with some details of the vulnerability, I can assure you that the error reporting configuration is irrelevant.
The HTTP response code is the only information needed for the attack.
200 vs. 500 vs. 404