search

paragonie / paseto

Platform-Agnostic Security Tokens
https://paseto.io
Other
3.24k stars 108 forks source link

Documentation: Type Safety and Whitelisting #75

Closed paragonie-scott closed 6 years ago

paragonie-scott commented 6 years ago

https://www.ietf.org/mail-archive/web/cfrg/current/msg09612.html

Our reference implementation does the safe thing here, but we should, at minimum, document the use of typed objects rather than opaque strings to prevent local/public confusion attacks.