Kevin Burke personal blog
Things to Use Instead of JSON Web Tokens
You might have heard that you shouldn't be using JWT. That advice is correct - you really shouldn't use it. In general, specifications that allow the attacker to choose the algorithm for negotiation have more problems than ones that don't (see TLS). N libraries need to implement M different encryption and decryption…
- Points
- 376
- HN comments
- 195
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2017
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| May 8, 2017 | Things to Use Instead of JSON Web Tokens by LaSombra | 376 | 195 |
