Topic

Signature and key encoding pitfalls

The formatting layer of applied cryptography: DER versus raw R||S signatures, uncompressed elliptic-curve point prefixes, base64url without padding, and the failures that follow when a library and a protocol disagree.

Current clusters

build1 publisher

Three in four VAPID signatures return 401 until the DER wrapper comes off

A WordPress plugin author implemented Web Push against VAPID and ES256 in a few hundred lines of PHP with OpenSSL. The crypto took an afternoon; the week went to a missing 0x04 byte, a wrong JWT audience and DER-encoded signatures.

Publishers:dev.to

Reality

Evidence62
Adoption12
Hype gap−8
Incentives30
Confidence58