Subject: [Anima] ASN.1 vulnerability

From: Toerless Eckert <[email-masked]>
Date: Wed, 20 Jul 2016 12:22:22 -0700

Funny... just weeks ago we did discuss in the bootstrap team how to
encode our ANIMA attributes into certs and i think MichaelR threw in to
be very careful and don't step of the well treaded path (known attributes
etc...) in fear of bad ASN.1 parser.

http://arstechnica.com/security/2016/07/software-flaw-puts-mobile-phones-and-networks-at-risk-of-complete-takeover/