Re:Brute forcing JSON Web Tokens in C
by porpoisemonkey on Saturday January 21, 2017 @02:08PM
(#13451512)
Yeah - that's unfortunate. The spec clearly outlines a required minimum key length and it could be easily enforced in JWS libraries to make things more secure.
[ Parent
| on HN ]
There are no comments on this comment yet.