SAML: A Fractal of Bad Design(blog.trailofbits.com) |
SAML: A Fractal of Bad Design(blog.trailofbits.com) |
Edit to add: This is also the only time I've seen JWT used in a security comparison and come out on top! (re: not including the signature in the payload)