News for hackers. Stuff that matters.

A comment on JSON Web Tokens should be avoided.

Re:JSON Web Tokens should be avoided by mamoulian on Tuesday March 14, 2017 @09:54AM (#13867457)
I suspect there are developers out there who haven't kept their secret as secret as it ought to be.

The leak of a JWT secret allows for easier and more severe attacks than the leak of many other secrets.

[ Parent | on HN ]

There are no comments on this comment yet.