Tag: signing
All the articles with the tag "signing".
Three bugs, one root cause: the label was not the identity
A rendering layer derives a human label from a machine identity. Both are strings. The type checker has nothing to say and the money path does.
I put a signing key in the browser on purpose
What that buys, split by what the attacker can already do, and why the property that actually protects the user is not in my code at all.