See http://wiki.laptop.org/go/Canonical_JSON -- you should probably at least mention unicode normalization of strings. You probably should also specify a validator: it doesn't matter if you emit canonical JSON if you can tweak the hash of the value by feeding non-canonical JSON as an input. --scott
On Fri, Mar 16, 2018 at 3:16 AM, Anders Rundgren < [email protected]> wrote: > Dear List, > > Here is a proposal that I would be very happy getting feedback on since it > builds on ES but is not (at all) limited to ES. > > The request is for a complement to the ES "JSON" object called > canonicalize() which would have identical parameters to the existing > stringify() method. > > The JSON canonicalization scheme (including ES code for emulating it), is > described in: > https://cyberphone.github.io/doc/security/draft-rundgren-jso > n-canonicalization-scheme.html > > Current workspace: https://github.com/cyberphone/json-canonicalization > > Thanx, > Anders Rundgren > _______________________________________________ > es-discuss mailing list > [email protected] > https://mail.mozilla.org/listinfo/es-discuss >
_______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss
