3 ms·
I mean, your homepage is pretty damn lacking and you even put something like this without putting any sources 'This has led to many security experts declaring b
by hoffs 8y ago
I mean, your homepage is pretty damn lacking and you even put something like this without putting any sources 'This has led to many security experts declaring boldly, "Don't use JWT!"'. This just looks like a poor attempt at making something 'better'.
- CiPHPerCoder 8y ago> I mean, your homepage is pretty damn lacking Do you honestly believe cybersecurity decisions should come down to how snazzy a homepage is, rather than a company's reputation? > and you even put something like this without putting any sources That article being discussed in this thread in particular quotes: 1. The opinions of other security experts 2. RFC 7515, section 4.1.1 3. The auth0 article about RS256/HS256 confusion 4. RFC 7518 5. The Adobe attack on ECDH-ES What additional kind of sources do you need? The arguments should be sufficiently supported by the material available. > This just looks like a poor attempt at making something 'better'. By what metrics could we make this attempt less "poor"? What specific changes do you need to see?