They *are* case-sensitive. > *The "alg" value is a case-sensitive ASCII string c... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		deathanatos on April 17, 2020 \| parent \| context \| favorite \| on: Auth0 JWT Auth Bypass: Case-Sensitive Blacklisting... They are case-sensitive. > The "alg" value is a case-sensitive ASCII string containing a StringOrURI value. This Header Parameter MUST be present and MUST be understood and processed by implementations.

JdeBP on April 17, 2020 [–]

But the protocol says that they are case-insensitive! is not a good response to the assertion that machine-to-machine protocols should not be case-insensitive, which is what theamk said.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact