Re:Critical Vulnerabilities in JSON Web Token Libraries
by bronson on Wednesday April 01, 2015 @01:52PM
(#9305456)
That sounds like a very niche case, probably not worth solving. That said, the JWT lib could allow you to specify one or more fallback algorithms in case the default one fails to validate.
If you're switching off an algorithm, you're probably doing it because it's been broken. And, if it's broken, you won't use it anyway.
If you're switching off an algorithm, you're probably doing it because it's been broken. And, if it's broken, you won't use it anyway.