Another Way Not to Sign JSON

from blog David Buchanan's Blog, | ↗ original
By David Buchanan, 27th December 2023 Signing JSON sucks. Don't do it. But if you must, you have two main options: Serialize your JSON to bytes, sign the bytes, and transmit the bytes+signature. Serialize your JSON to a canonical byte representation, sign those bytes, and transmit your JSON+signature. 1 is the most straight-forward option, but now you need to ship those bytes around...