Evert Pot personal blog

JWT should not be your default for sessions

by @evertp evertpot.com 7 min read

When designing web applications, (especially the traditional HTML kind), you will at one point have to figure out how to log a user in and keep them logged in between requests.

Points

335

HN comments

230

Submissions

1

Cited by

0 commenters

Security & PrivacyWeb & Frontend2021

Related posts from the same era

No Cookie for You

The GitHub Blog20202,941 points609 commentscited by 30 details

When you browse Instagram and find Tony Abbott's passport number

mango.pdf.zone20202,326 points446 commentscited by 9 details

Apple's plan to “think different” about encryption opens a backdoor to your life

EFF Deeplinks20212,260 points824 commentscited by 11 details

Someone is pretending to be me

Connor Tumbleson20222,244 points383 commentscited by 3 details

Oppose the Earn IT Act

Mozilla Foundation20202,229 points543 comments details

Whistleblower: Ubiquiti Breach “Catastrophic”

Krebs on Security20211,944 points785 commentscited by 9 details