The alternative to JWTs isn't rolling your own signing scheme. Use PASETO instead. https://paseto.io https://paseto.io But the issue being discussed in this ar

The alternative to JWTs isn't rolling your own signing scheme. Use PASETO instead. https://paseto.io https://paseto.io But the issue being discussed in this article is about how JWTs are being used, not JWTs themselves. > don't do security if you don't understand your primitives.. The security industry needs to do more to provide tools that do security for people who don't understand their primitives.