String payload = encoded.substring(0, encoded.indexOf('.'));
ObjectInputStream ois = new ObjectInputStream(new InflaterInputStream(new Base64.InputStream(payload)));
Confirmation cve = (Confirmation)ois.readObject();
if (!cve.sign(secret).equals(encoded)) throw new InvalidSignature();
String payload = encoded.substring(0, encoded.indexOf('.'));
ObjectInputStream ois = new ObjectInputStream(new InflaterInputStream(new Base64.InputStream(payload)));
Confirmation cve = (Confirmation)ois.readObject();
if (!cve.sign(secret).equals(encoded)) throw new InvalidSignature();