123
100%

Ran 04 Sep 2015 05:12PM UTC

Jobs 1

Files 29

Run time 1s

Badge

Embed ▾

pending completion

Build # 123

Build Type

push

travis-ci

Committed by

ssoloff

Commit Message

Always use server's public key to verify signatures.

The `node-jws` module does not yet implement X.509 certificate chain validation.  Thus, it is not safe to use the public key embedded in the JWS protected header as it may be from an untrusted source.  Until certificate chain validation is implemented, we must explicitly use the server's public key to verify a signature.

An implication of this is that a load-balanced service would have to use the same public/private key pairs across all service instances.

Run Details

1676 of 1676 relevant lines covered (100.0%)

5.34 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	123.1	04 Sep 2015 05:12PM UTC	0	100.0	Travis Job 123.1

Source Files on build 123

Detailed source file information is not available for this build.

ssoloff / dice-server-js / 123
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 123

ssoloff / dice-server-js / 123 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 123

ssoloff / dice-server-js / 123
100%

README BADGES
x