4 ms·
SAML's signature problem: It's not you, it's XML
- rdegges 1y agoThe way XML digital signatures work is so weird. This routinely comes up year-after-year. When I was working at Okta this also resulted in a number of annoying breaches, including this one: https://developer.okta.com/blog/2018/02/27/a-breakdown-of-the-new-saml-authentication-bypass-vulnerability https://developer.okta.com/blog/2018/02/27/a-breakdown-of-th...