News for hackers. Stuff that matters.

A comment on How not to sign a JSON object. Parent comment

Re:How not to sign a JSON object by lvh on Wednesday July 24, 2019 @01:49PM (#20517708)
The nice thing about HMAC is that it's so bulletproof and easy to use. There are no footguns you introduce by using HMAC directly instead of using HS256, and there are plenty you introduce by using HS256 instead of plain HMAC.
[ Parent | on HN ]

There are no comments on this comment yet.