Paragon Initiative Enterprises Blog company blog
JSON Web Tokens should be avoided
JWT, JWE, JWS, etc. are terrible designs and need to be scrapped, not resuscitated.
- Points
- 386
- HN comments
- 424
- Submissions
- 3
- Cited by
- 18 commenters
Security & PrivacyWeb & Frontend2017
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Mar 14, 2017 | JSON Web Tokens should be avoided by CiPHPerCoder | 386 | 297 |
| Feb 19, 2020 | Javascript Object Signing and Encryption is a Bad Standard (2017) by xenocratus | 173 | 55 |
| Jul 12, 2021 | JavaScript Object Signing and Encryption is a bad standard (2017) by IggleSniggle | 84 | 72 |
Cited in comments
Linked from 28 Hacker News comments by 18 different people, from May 2017 to Jun 2026.
Most recent:
- ForHackernews · Jun 16, 2026
- bastawhiz · Jun 16, 2026
- solatic · Jun 16, 2026
- ricardobeat · Nov 17, 2025
- some_furry · Sep 1, 2025
- cyberax · May 26, 2025
