TLDR InfoSec · QUICK LINKS

TRUFFLEHOG NOW DETECTS JWTS WITH PUBLIC-KEY SIGNATURES AND VERIFIES THEM FOR LIVENESS

trufflesecurity.com7 min read

Summary from the TLDR InfoSec newsletter

TruffleHog's new JWT detector identifies public-key-signed tokens and verifies liveness through local claim validation and OIDC Discovery.