ASP.NET Padding Oracle

| Posted in ASP.NET, Programming

I’m doing research to better understand the padding oracle attack that was recently disclosed to affect ASP.NET and thought to provide a quick list of links that I’ve found most helpful:

The ASP Classic is the most unexpected bit to me, but makes perfect sense.

Update: Patch your servers, as the padding oracle is no longer needed. Thanks Matt!