3 ms·
Sure it does - it says: * ACME is a badly designed standard, a mess of binary-in-base64-in-json-in-canonical-form-hashed-sent-over-http-sent-over-ssl. The auth
by michaelt 4y ago
Sure it does - it says:
* ACME is a badly designed standard, a mess of binary-in-base64-in-json-in-canonical-form-hashed-sent-over-http-sent-over-ssl. The author doesn't like it.
* LE invented ACME, and can only be used via ACME
Personally I don't know enough about ACME to say whether the author is right or not - but I've worked with SAML so I know if extensible human-readable text formats are a foot then digital signatures are a gun.
- Arnavion 4y agoJWS (the thing that the author is complaining about) involves a canonicalization step to resolve that footgun.