News for hackers. Stuff that matters.
Re:JSON Web Tokens should be avoided by Ajedi32 on Tuesday March 14, 2017 @09:20AM (#13867258)
The very next sentence:

> Although I suppose you could argue that a cookie is just another header value.

So... yes.

Re:JSON Web Tokens should be avoided by mgkimsal on Tuesday March 14, 2017 @09:22AM (#13867271)
Ack - missed that - was visually jumping around some.

But yes, it is.