Reading up on Trail of Bits
2 deep · digging since feb 16
- SAML: A fractal of bad design - The Trail of Bits Blog
SAML's XML complexity, canonicalization issues, enveloped signatures, and design ossification cause persistent vulnerabilities; organizations should migrate to OpenID Connect.
- the problem isn’t OpenClaw. it’s the architecture.
The article argues that the security risks from AI agent frameworks like OpenClaw are inherent to the architecture of autonomous tool use and marketplaces, not just a single platform.