News for hackers. Stuff that matters.

A comment on Should I Use jwts For Authentication Tokens?. Parent comment

Re:Should I Use jwts For Authentication Tokens? by davedx on Monday May 27, 2024 @01:22PM (#40492770)
If someone nefarious steals your <secret something> then yes you have problems, this isn’t anything unique to JWTs
[ Parent | on HN ]
Re:Should I Use jwts For Authentication Tokens? by ummonk on Monday May 27, 2024 @02:52PM (#40493480)
It makes a pretty big difference whether you have to send the secret down the wire to prove you possess it (e.g. a JWT, unlike say a private key).
[ Parent | on HN ]