News for hackers. Stuff that matters.

A comment on How not to sign a JSON object. Parent comment

Re:How not to sign a JSON object by merlincorey on Sunday July 28, 2019 @12:57AM (#20545921)
I believe the distinction is that with PASETO, the versions are by specification not backwards compatible.

So, if my application supports v2 and you "forge" a v1 token, my application will not validate it.

[ Parent | on HN ]

There are no comments on this comment yet.