I grow more and more tired of posts touting engineering sensationalism. Here is a point of order for developers who work on something realize it isn't idiot pr

I grow more and more tired of posts touting engineering sensationalism. Here is a point of order for developers who work on something realize it isn't idiot proof (them proof) out of the box and then want to write a sensational post: Implementation and design are a core part of anything you do and considering the risks and accounting for them are part of doing business. Having worked with large organizations that do active and passive scanning of the web I am constantly shocked how often we are contacting someone about basic SQL injection in their application... in 2017. JWT is an incredibly powerful standard if implemented effectively but its not for the LAZY, it requires thoughtfulness where ever it is active. JWT solves a serious and real problem that organizations face at scale which is why you see it implemented in systems like google sign in. Realistically its not going anywhere. People love criticizing the movement towards stateless tokens on the web I find it pretty funny... crawl down the stack from their webheads and you usually come face to face with Kerberos managing auth within their networks...