News for hackers. Stuff that matters.
Re:Ask HN: What's the current sentiment on JWT for stateless... by GordonS on Saturday December 14, 2019 @05:38AM (#21788806)
> JWTs are inefficient for performance and are bloated in their data structure and have a performance hit when you parse the token to extract its properties compared with the same operation in other alternatives (simple session cookie require zero parsing and thus is faster)

While a session ID doesn't require parsing, it is useless on it's own; a fairer comparison would be: time to validate and parse/deserialize a JWT vs time to retrieve session data from the backing store (e.g. database, redis).

There are no comments on this comment yet.