Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
TZubiri
21 days ago
|
parent
|
context
|
favorite
| on:
Why I no longer have an old-school cert on my HTTP...
It feels like malpractice to use json in encryption
red_admiral
20 days ago
[–]
Sadly JWT and friends are "standard". In theory the representation and the data are independent and you can marshal and unmarshal correctly.
In practice, "alg:none" is a headache and everyone involved should be ashamed.
Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
