I can't speak for egberts1, but Thomas Ptacek(@tptacek) has written a lot on why JWTs should be avoided. Here's an HN search for his comments on JWTs: https:/

I can't speak for egberts1, but Thomas Ptacek(@tptacek) has written a lot on why JWTs should be avoided. Here's an HN search for his comments on JWTs: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&query=author%3Atptacek%20jwt&sort=byDate&type=comment https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu... Here is one of his comments about JWT: In cryptography, we have a concept of "misuse resistance". https://news.ycombinator.com/item?id=14292223 https://news.ycombinator.com/item?id=14292223)