4 ms·
ES256 is in the spec at least
by buckhx 10y ago
ES256 is in the spec at least
- CiPHPerCoder 10y agoThe last thing the Internet needs more of is foot-bullety ECDSA deployed at scale. Point of order: Does ES256 enforce RFC 6979? If not, how do you know you aren't repeating k-values? The only sane crypto in the JWT specification is, sadly, HMAC.