I'm not gonna say JSON Web Tokens are *bad* (if used properly), ... • Aaron Parecki

I'm not gonna say JSON Web Tokens are *bad* (if used properly), but I'm also not gonna say they're *great* either.

Here's an interesting alternative though: PASETO

https://developer.okta.com/blog/2019/10/17/a-thorough-introduction-to-paseto

Brighton, England • 58°F

#jwt #json #paseto #security #oktadev

Thu, Oct 17, 2019 6:25pm +01:00

14 likes 1 repost 1 reply
- Philip Saa 🇩🇪 #fall
Have you written a response to this? Let me know the URL:
- Alex White twitter.com/NAlexWhite
  
  I can’t say that they make a convincing argument against JWT and their derivatives. Plus I’m not impressed by secrets management that suggests “safely store a shared secret key (maybe in environment variables”
  
  Thu, Oct 17, 2019 6:41pm +00:00 (via brid-gy.appspot.com)

Posted in /notes using quill.p3k.io