4 ms·
The unencrypted nature of these is something that gets overlooked a lot of times. If you are transmitting metadata about some item, such as a song or a video,
by sologoub 8y ago
The unencrypted nature of these is something that gets overlooked a lot of times.
If you are transmitting metadata about some item, such as a song or a video, that’s one thing, but when it’s user info and the payload is not encrypted, you end up essentially leaking that data.
Other issues arise when you throw in logging and crash reporting - you may not even realize that that JWT session token just got logged and now you have user data where it doesn’t belong.