How to Decode and Verify a JWT in Your Browser, Step by Step

Navigating RS256 and JWKS | Auth0

Learn how to use an algorithm like RS256 and the JWKS endpoint to allow your applications to trust the JWTs signed by Auth0.

Generate a JWT with ECDSA keys

To generate a JWT signed with the ES256 algorithm and ECDSA keys using the P-256 (secp256k1) curve, you need to use openssl commands or the auth0 library . This procedure explains how to generate a JWT with openssl commands. A JWT consists of three parts separated by dots. Header Payload Signature T...

Secure APIs Without JWT: Alternatives You Should Know About

The default way to authenticate an API is now with JSON Web Tokens. If you talk about securing an API, someone will always say, “just use…

Improving the trustworthiness of Javascript on the Web

Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.

Building a Browser-Native Verification Stack for Tinfoil

Learn how we built a browser-based confidentiality and integrity verifier with implementations of browser-native Sigstore and TUF libraries.

Get started with the Verify with Wallet API - Apple Developer

Apps that require age or identity verification can use the Verify with Wallet API to quickly and securely verify a person’s information using their digital driver’s license or state ID stored in Apple Wallet.

Tutorial: Introduction to Formal Verification with Lean (Part 1) - HashCloak

A tutorial Formal Verification using Lean for cryptographic engineers. Implement and prove correctness of the One-Time pad following a cryptography book.

jqssun/android-helium-browser

Secure open-source Android browser with support for extensions

Security Verification

Security verification page to protect against malicious bots.

Elena Rossini on GoToSocial ⁂ (@elena@aseachange.com)

How to create an account on #WSocial in 13 easy steps: 1️⃣ choose a username 2️⃣ choose a password 3️⃣ choose your interests 4️⃣ download the #WIdentity app to your phone (two options: Apple AppStore or Google Play Store) 5️⃣ scan a QR code 6️⃣ create a PIN code optional: enable biometrics; re-enter PIN 7️⃣ choose whether you simply want to verify that you're human or if you also want to verify your name 8️⃣ choose the verification method (automatic photo review, request a manual review or scan your passport chip) 9️⃣ scan your passport's picture page 1️⃣0️⃣ scan your passport's chip 1️⃣1️⃣ take a selfie 1️⃣2️⃣ scan a QR code to link the W Identity to your W Social account 1️⃣3️⃣ enter your PIN code Congratulations, you're verified*! (* for two years) Demonstration in all its simple glory here: 📺 : https://inv.nadeko.net/Vcq4MiabpEQ Please save this toot as reference if you ever hear somebody say that IT'S TOO COMPLICATED TO JOIN THE FEDIVERSE BECAUSE YOU NEED TO PICK A SERVER 🤡 #SocialMedia

What your browser supports

Live capability check, performed in your browser. "You" is your current engine. Click any capability for the MDN reference.

WEBCAT - Verifiable Code for the Web

WEBCAT helps people trust the websites they use by making it possible to verify the code running in their browser.

JSON Formatter & Validator

Format and validate JSON data so that it can easily be read by human beings.

Introducing WEBCAT: Web-based Code Assurance and Transparency

In this post, we introduce Web-based Code Assurance and Transparency, a project that supports verifiable in-browser code for single-page browser applications. Along with this post, we are publishing the WEBCAT project repository; follow-up posts will provide more detailed information.

Verifying your browser | OpenReview