News for hackers. Stuff that matters.
Re:JSON Web Tokens should be avoided by zeveb on Tuesday March 14, 2017 @11:11AM (#13868094)
It makes JSON deterministic, which it isn't by default (e.g. {"foo": 1, "bar": 2} and {"bar":2,"foo":1} are both valid serialisations.

Of course, it'd be better still to use a format _meant_ to provide human-readable canonical representations of data, e.g. Ron Rivest's canonical S-expressions (http://people.csail.mit.edu/rivest/Sexp.txt), but of course this is information technology and we have to reinvent the wheel — usually as an irregular polygon — every 3-4 years rather than using techniques which are tried and true.

Re:JSON Web Tokens should be avoided by arethuza on Tuesday March 14, 2017 @11:19AM (#13868163)
Ah yes, similar to canonicalization of XML for XMLSignature?

Presumably this means that you have to have have a "flat" JSON structure rather than lots of nested objects and arrays?

Re:JSON Web Tokens should be avoided by woah on Tuesday March 14, 2017 @12:11PM (#13868750)
Afaik you just need to alphabetize the properties of every object