News for hackers. Stuff that matters.

A comment on JWT is Awesome. Parent comment

Re:JWT is Awesome by snak on Tuesday February 18, 2020 @06:37AM (#22355191)
Well, for a long time there was no SameSite browser support for cookies, CSRF was a vulnerability (excluding STP and other techniques to avoid it).
[ Parent | on HN ]
Re:JWT is Awesome by tmikaeld on Tuesday February 18, 2020 @08:56AM (#22356053)
You're right, SameSite became properly supported just a year ago for the majority of browsers.

Reference:

https://caniuse.com/#search=SameSite

[ Parent | on HN ]