Hacker News Reader

The SSB issue with json is that it plays with the json after signing it. Just don't do that.

Please elaborate

What specifically do you mean? I have so far resorted to using http_build_query type algorithms to make it for sure canonical.