Yes, that’s a good thing. That alg:none might be easy in tests is not a good reason for a weak mode in the real code and spec.

Been there, done that, wrote the stub/mock and ended up with the better test. :)

Wasn’t it like a month ago when Sharepoint still accepted alg:none? I guess that proves they’re not using Java :)