News for hackers. Stuff that matters.
Re:Stop using JWT for sessions (2016) by CiPHPerCoder on Thursday November 01, 2018 @12:19PM (#18355535)
The alternative to JWTs isn't rolling your own signing scheme. Use PASETO instead. https://paseto.io

But the issue being discussed in this article is about how JWTs are being used, not JWTs themselves.

> don't do security if you don't understand your primitives..

The security industry needs to do more to provide tools that do security for people who don't understand their primitives.

There are no comments on this comment yet.