3 ms·
Yeah, at this point, just use PASETO and be done with it. It's not worth trying to figure out which JWT misconfiguration will burn you next.
by StavrosK 6y ago
Yeah, at this point, just use PASETO and be done with it. It's not worth trying to figure out which JWT misconfiguration will burn you next.
- jamescontrol 6y agoFrom pypaseto “ This is still in early development. It has not been reviewed in a security audit yet, so please be aware that it is not expected to be ready for use in production systems.”
- timvdalen 6y agoIs that remark about that specific implementation or the spec as a whole?
- kingemer 6y agoJust for the specific implementation. The reference implementation is the PHP version here: https://github.com/paragonie/paseto https://github.com/paragonie/paseto And has had a lot more attention.