3 ms·
The last thing the Internet needs more of is foot-bullety ECDSA deployed at scale. Point of order: Does ES256 enforce RFC 6979? If not, how do you know you are
by CiPHPerCoder 10y ago
The last thing the Internet needs more of is foot-bullety ECDSA deployed at scale.
Point of order: Does ES256 enforce RFC 6979? If not, how do you know you aren't repeating k-values?
The only sane crypto in the JWT specification is, sadly, HMAC.