3 ms·

I found Cisco’s wrappers for WebCrypto implementing JOSE to be good and I don’t plan to avoid it. https://github.com/cisco/node-jose https://github.com/cisco/no

I found Cisco’s wrappers for WebCrypto implementing JOSE to be good and I don’t plan to avoid it. https://github.com/cisco/node-jose https://github.com/cisco/node-jose

detaro 7y ago
What about those wrappers avoids the problems described in the article?
- jchrisa 7y ago
  I’m pretty sure they make it hard to shoot yourselves in the foot. It’s been a while.
  - bvrmn 7y ago
    No, by default library allow "none" alg. And there is no mandatory option to limit algs. Your foot is no more. var DEFAULT_OPTIONS = { algorithms: "*", allowEmbeddedKey: false };