Why “saml” is being discussed
The most recent Hacker News stories and comments contributing to this topic's mentions.
JWT uses a famously misdesigned signature scheme. It’s kind of amazing that this article uses JWT as an example of being better than SAML — SAML really is awful!
by amluto · Sep 23, 2026
I maintain a popular Saml library for NET (aspnetsaml). And yep, I made that rookie mistake too
by jitbit · Sep 23, 2026
SAML is XML era legacy so mostly ugly but it's just the form of it. But all the security problems come from XMLDSIG which is just the worst signature scheme ever designed. So mu…
by bdauvergne · Sep 23, 2026
XML did not become more complex following 2002. DTD, Namespaces, Comments, processing instructions, CData, attribute vs. child dichotomy - all of these things exited from day 0.…
by unscaled · Sep 23, 2026
Just shipped another SAML integration; pretty sure I lost a few years off my life. The XML signature bits always get me.
by harlan_pdx · Sep 23, 2026
Saml serializing to XML is not a problem at all, the problem is then including the signature within the XML, which Saml idiotically does. They could just as well have appended i…
by downsplat · Sep 23, 2026
Interest
Proportion of Hacker News items mentioning "saml" over time.
Mentions
Total number of Hacker News items mentioning "saml" over time.