SAML: A fractal of bad design

Lobsters·34 points·fanf·8 days ago·blog.trailofbits.com

SAML, the XML-based authentication protocol that birthed the SSO industry, is fundamentally flawed due to XML complexity, canonicalization issues, enveloped signatures, and design ossification, making it vulnerable to…

Read the full article at blog.trailofbits.com →

#saml #design #fractal #bad design #rant #security #xml #based

Related stories

SAML: A fractal of bad designblog.trailofbits.com
Hacker News · 348 points · 8 days ago
SAML: A Fractal of Bad Designblog.trailofbits.com
Hacker News · 1 points · 9 days ago
The Risks of Ignoring API Security During Mobile App Security Testing
Hacker News · 1 points · 3 days ago
Show HN: HomeAI.design – Visualize interior design ideas from a photohomeai.design
Hacker News · 1 points · 4 days ago
Forging 1024-bit RSA signatures in nearly SNFS timeeprint.iacr.org
Lobsters · 7 points · 6 days ago
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-dayarstechnica.com
Ars Technica · 0 points · 9 days ago

Related topics

based99 fractal8 design138 bad design3 xml8 authentication8 protocol27 rant21 security257