New Cryptographic Vulnerability

[shp]

Hi Telerik team,

Is cryptographic vulnerability described at http://www.telerik.com/support/kb/aspnet-ajax/details/cryptographic-weakness?utm_medium=email

only applicable if we are using “Telerik.Web.UI.DialogHandler” control in our application ?  

Thanks.

[DotNet]

Hi, I was wondering the same thing. Also if the dialog handler isn't referenced in the web.config do you need to include the 'remove' in handlers?

[Rumen]

Hello,

@shp: If you remove the Telerik.Web.UI.DialogHandler from the web.config file the cryptographic vulnerability won't be applicable. This is discussed in the following section of the KB article: http://www.telerik.com/support/kb/aspnet-ajax/details/cryptographic-weakness?utm_medium=email#prevent-access.

@DotNet: If the handler is not available in the web.config, it is not needed to add a remove attribute to the web.config file.

Best regards,
Rumen
Progress Telerik