Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes and no, the JSON handling of things like binary data (hashes) and big-ints leaves a bit to be desired (sure we can use base64 encoding). Asn.1 isn't great by any extent but for this JSON really isn't much better apart from better library support.

Yes, JOSE is still infinitely better than XmlSignatures and the canonical XML madness to allow signatures _inside_ the document to be signed.



Or use COSE, which uses CBOR, which doesn't have to base64-encode all the binary blobs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: