3 ms·
> Use specific tools for the thing you are actually trying to do, that have API's that are harder to mess up. That sounds like it would require a greater amoun
by rattray 10y ago
> Use specific tools for the thing you are actually trying to do, that have API's that are harder to mess up.
That sounds like it would require a greater amount of knowledge to do correctly than "careful JWT".
- kevinburke 10y ago"Careful JWT" implies you know what you should be careful about. If you know that much, you should just use the better things. It also ignores the role JWT plays in promoting bad security practices