search

victims / victims-web

The victims web application.
GNU Affero General Public License v3.0
8 stars 5 forks source link

Remove Content-Type from HMAC (Enhancement) #81

Closed trevorjay closed 11 years ago

trevorjay commented 11 years ago

The inclusion of "Content-Type" in the HMAC makes pre-calculation difficult when using tools (like curl) that automatically create random nonces as part of a multi-part boundary.

abn commented 11 years ago

Content-Type is no longer used for signature generation/verification.