(Hi I'm not 'tptacek, I work with him but don't speak for him) If you just want a few examples of stuff that can go wrong that doesn't go wrong if you just use

(Hi I'm not 'tptacek, I work with him but don't speak for him) If you just want a few examples of stuff that can go wrong that doesn't go wrong if you just use a stored token instead of crypto, or doesn't go wrong if at least you use symmetric crypto instead of asymmetric crypto: - Some bugs are about negotiation, e.g. key material misuse between RSA and HMAC schemes in JWT. - Some bugs are about cryptographic implementation, such as not reusing nonces for ECDSA or RSA padding oracles or RSA keygen vulns (see Infineon bugs a few months ago). These are almost exclusively in the asymmetric crypto camp. - Some bugs are about specification issues, such as non-mandatory aud (audience) and exp (expiry). You don't have specification issues if your tokens are opaque random numbers. You have significantly less bad/fewer specification issues if your tokens are versioned and you don't allow negotiation.