1
100%
master: 100%

Ran 04 Sep 2015 05:12PM UTC

Files 29

Run time 1s

Badge

Embed ▾

Committed 04 Sep 2015 05:07PM UTC coverage: 100.0%. Remained the same

Job # 123.1

Build Type

push

travis-ci

Committed by

ssoloff

Commit Message

Always use server's public key to verify signatures.

The `node-jws` module does not yet implement X.509 certificate chain validation.  Thus, it is not safe to use the public key embedded in the JWS protected header as it may be from an untrusted source.  Until certificate chain validation is implemented, we must explicitly use the server's public key to verify a signature.

An implication of this is that a load-balanced service would have to use the same public/private key pairs across all service instances.

Run Details

1676 of 1676 relevant lines covered (100.0%)

5.34 hits per line

ssoloff / dice-server-js / 123 / 1
100%
master: 100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 123.1

ssoloff / dice-server-js / 123 / 1 100% master: 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 123.1

ssoloff / dice-server-js / 123 / 1
100%
master: 100%

README BADGES
x