News for hackers. Stuff that matters.

A comment on How not to sign a JSON object. Parent comment

Re:How not to sign a JSON object by merb on Monday July 29, 2019 @05:00PM (#20559394)
well you can use most JWT libraries with alg: none but specify the alg (so not none alg) it still is against the spec, but it works in over 70% of all libraries.
[ Parent | on HN ]

There are no comments on this comment yet.