3 ms·
The author of this article cannot be trusted. He regularly writes articles that compare non-best practices of JWT to best practices of other technologies to ma
by wedowhatwedo 8y ago
The author of this article cannot be trusted. He regularly writes articles that compare non-best practices of JWT to best practices of other technologies to make JWT look bad. Because of him, I would not trust Okta at all. Take any article by Okta with a grain of salt.
- CuriousSkeptic 8y agoWhat practices would that be? Both good and bad is interesting to me. I recently decided against using jwt bearer tokens due to the concerns expressed in both rfcs and owasp of being to risky when compared to session cookies. But really I’m wondering if the risk of screwing up csrf protection isn’t more of a concern than token leaks.
- jammygit 8y agoI've read some of those articles and I found them fairly informative. Could you be more specific about the best practices that invalidate his arguments?
- chayesfss 8y agoThe definition of sour grapes right here