[EAS] Part 11
Harold Price
hprice at sagealertingsystems.com
Fri May 27 10:41:50 CDT 2011
We will need a firmware update to handle the specific format of RSS
that FEMA decides to use. They have not published it yet.
An RSS feed is not unlike a web server, and the security
considerations for protecting a web server apply - protecting who can
post, spoofing the site, etc.
The information in the RSS message can be digitally signed. The
individual CAP messages referenced in the RSS need can also be
digitally signed.
Using RSS adds no additional security concerns over the existing concerns.
Harold
At 10:19 AM 5/27/2011, Miller, Don (EMD) wrote:
>Is your firmware capable of RSS feeds now? Or is a firmware upgrade
>needed. How hard is it to hack into an RSS feed and plant a CAP alert?
More information about the EAS
mailing list