News for hackers. Stuff that matters.

A comment on Brute forcing JSON Web Tokens in C. Parent comment

Re:Brute forcing JSON Web Tokens in C by brendanrius on Saturday January 21, 2017 @01:55PM (#13451435)
Definitely, you would be surprised by the amounts of JWT using very simple secrets
[ Parent | on HN ]
Re:Brute forcing JSON Web Tokens in C by porpoisemonkey on Saturday January 21, 2017 @02:08PM (#13451512)
Yeah - that's unfortunate. The spec clearly outlines a required minimum key length and it could be easily enforced in JWS libraries to make things more secure.
[ Parent | on HN ]