Adam Moussa ba7c981907 docs(ses_auth): note CFWS ends abutting tokens ... The space inserted for a removed comment means header.d=domain(note) now reads as "domain" where the old gluing behaviour produced "domainnote" (rejected). Document in _strip_comments that this loosening is deliberate and safe -- header.d comes verbatim from a verified signature's d= tag, so a comment in that position is never attacker-controlled -- and pin the behaviour with a regression test. Review follow-up to PR #103; no runtime behaviour change.		2026-07-16 14:58:03 -04:00
..
po	docs(ses_auth): note CFWS ends abutting tokens	2026-07-16 14:58:03 -04:00
wo	docs(ses_auth): note CFWS ends abutting tokens	2026-07-16 14:58:03 -04:00