‹ BackHN Continuity

Thread

I could've accessed 17T Microsoft records

322 points · 128 comments · luispa

  1. er0k · · focus · HN ↗
    wow I am so surprised to hear once again how JWTs are terrible

    <a href="https:&#x2F;&#x2F;www.howmanydayssinceajwtalgnonevuln.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.howmanydayssinceajwtalgnonevuln.com&#x2F;

    1. talon8635 · · focus · HN ↗
      Does this extend to OIDC? I’m not knowledgeable on the topic but it uses JWT right? Is it also prone to poor implementation? If you just error on alg=none does that solve it?
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.