4 ms·
The passage about Gorilla's securecookie is misleading. JWT only sign the data. It doesn't encypher it. The Gorilla's securecookie, encypher the data and signs
by chmike 8y ago
The passage about Gorilla's securecookie is misleading. JWT only sign the data. It doesn't encypher it. The Gorilla's securecookie, encypher the data and signs the encyphered data, the date and the cookie name.
Note also the existence of github.com/chmike/securecookie which is as secured, and more efficient in size, number of allocations and speed.