SAML: A Fractal of Bad Design

发生了什么

SAML, the XML-based authentication protocol that birthed the SSO industry, is fundamentally flawed due to XML complexity, canonicalization issues, enveloped signatures, and design ossification, making it vulnerable to signature wrapping attacks and parser differentials that persist despite decades of awareness. Organizations should migrate to OpenID Connect (OIDC), which avoids these pitfalls through simpler JSON-ba…

摘要按规则整理自下方来源原文

时间线

1. 18:57
   Hacker News 最先出现HHacker News
2. 10:58
   Lobsters 出现讨论LLobsters

来源