// Research series
Signed Bytes and Parser Differentials
How signatures over bytes fail as a security boundary when verifiers and applications resolve different meanings.
2-part series · Read in order
// Reading path
From first question to final consequence.
- Part 1Signatures are over bytes, not meaning.Two messages can express the same data and still produce different signatures. Verification begins with the exact bytes a protocol chooses to protect.
- Part 2The verifier and the parser disagree.Signature verification fails as a security boundary when the verifier and the application resolve different meanings from the same document.
