3 Responses to “Mike Adams: Developing Secure Widgets: Secure iFrame Communication in a Pre-postMessage World”

1. mdawaffe
   September 7, 2011 at 10:15 pm | Reply

   Relevant links:

   In development (can you find the bugs?) postMessage library with secure fallback:
   github.com/mdawaffe/xPostMessage

   More details for those looking for inspiration on how to craft real attacks:
   Securing Frame Communication in Browsers:
   A. Barth, C. Jackson, J. C. Mitchell — Stanford Web Security Group
   Proc. of the 17th USENIX Security Symposium. (USENIX Security 2008)
   seclab.stanford.edu/websec/frames/post-message.pdf
2. Mark Jaquith
   March 27, 2012 at 4:37 pm | Reply

   So people don’t have to watch the whole talk to recall the punchline: Needham—Schroeder Protocol.
3. Daniel Bachhuber
   August 2, 2012 at 9:34 am | Reply

   Reblogged this on danielbachhuber.

Continue the discussion Cancel reply

Enter your comment here...

Fill in your details below or click an icon to log in:

Email (required) (Address never made public)

Name (required)

Website

You are commenting using your WordPress.com account. ( Log Out / Change )

You are commenting using your Twitter account. ( Log Out / Change )

You are commenting using your Facebook account. ( Log Out / Change )

Cancel

Connecting to %s

Notify me of new posts via email.