Skip to content

OWA: very difficult to trace failures due to empty public key record. The...

Zot requested to merge zot/core:owafix into dev

OWA: very difficult to trace failures due to empty public key record. The signature might succeed because an empty key triggers an external key fetch. But the empty key cannot encrypt the token. This has been observed in the wild on a number of sites/projects.

Merge request reports