Lesson 3 of 9 · 22m

HMAC and the Length-Extension Attack

Why `H(secret || m)` is forgeable, how HMAC fixes it, and the constant-time verify every webhook needs.