[EAS] Part 11

Harold Price hprice at sagealertingsystems.com
Fri May 27 10:41:50 CDT 2011


We will need a firmware update to handle the specific format of RSS 
that FEMA decides to use.  They have not published it yet.

An RSS feed is not unlike a web server, and the security 
considerations for protecting a web server apply - protecting who can 
post, spoofing the site, etc.

The information in the RSS message can be digitally signed.  The 
individual CAP messages referenced in the RSS need can also be 
digitally signed.

Using RSS adds no additional security concerns over the existing concerns.

Harold

At 10:19 AM 5/27/2011, Miller, Don (EMD) wrote:
>Is your firmware capable of RSS feeds now? Or is a firmware upgrade
>needed.  How hard is it to hack into an RSS feed and plant a CAP alert?



More information about the EAS mailing list