News for hackers. Stuff that matters.

A comment on JSON Web Tokens should be avoided. Parent comment

Re:JSON Web Tokens should be avoided by tracker1 on Tuesday March 14, 2017 @02:17PM (#13870003)
JWT signature verification usually takes less time than the network request to a redis server... assuming it's non-local, because HA.
[ Parent | on HN ]
Re:JSON Web Tokens should be avoided by jchw on Wednesday March 15, 2017 @12:54PM (#13877567)
I'll just say this: if the most expensive part of your API is calling Redis, it probably doesn't have anything worth authenticating for in the first place.
[ Parent | on HN ]