> I'm pushing for an IETF RFC this year. Are you planning an informational docum... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dwaite on April 16, 2020 | parent | context | favorite | on: Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting...

> I'm pushing for an IETF RFC this year.

Are you planning an informational document, or going through the IETF standardization process?

Also, the last published draft is two years old this week. Have there been changes since then to the spec? Are implementations generally interoperable?

CiPHPerCoder on April 17, 2020 [–]

I'll be sending an email to CFRG, probably next week, with any spec changes.

But before I resuscitate PASETO, XChaCha20 needs an RFC. It's pending IRTF kick-off.

https://tools.ietf.org/html/draft-irtf-cfrg-xchacha-03

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact