Subject: [OAUTH-WG] Critical vulnerability in JSON Web Encryption (#JWE) - RFC 7516 Invalid Curve Attack

From: Antonio Sanso <[email-masked]>
Date: Mon, 13 Mar 2017 19:59:30 +0000

hi *,

sorry for cross posting with the jose mailing list

http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html

regards

antonio