News for hackers. Stuff that matters.

A comment on JSON Web Tokens should be avoided. Parent comment

Re:JSON Web Tokens should be avoided by scottmf on Tuesday March 14, 2017 @09:22AM (#13867269)
> there's a reason crypto people hate the JWT/JOSE/JWE standards. You should avoid them

Could you give more info about this? If ECDHE-ES is avoided why else is JWT insecure?

[ Parent | on HN ]
Re:JSON Web Tokens should be avoided by tptacek on Tuesday March 14, 2017 @09:23AM (#13867286)
https://news.ycombinator.com/item?id=13866983
[ Parent | on HN ]