These questions focus on the parts that make real HMAC request-signing schemes succeed or fail: canonical bytes, replay controls, constant-time verification, and key scope.
0 / 6
Why do serious request-signing schemes use HMAC-SHA-256 instead of a naive construction like `SHA256(secret || message)`?
Press 1 to 4 to pick an answer