3 ms·

JWT is not deprecated at all, where did you get that from?

• mixmastamyk 6y ago
  Security experts say not to use it. Search this site for multiple references.
  • RedShift1 6y ago
    List me any points you have and I'll gladly address them.
    • mixmastamyk 6y ago
      They’re not my points and I don’t use it based on their recommendations.
      • RedShift1 6y ago
        Half of the time when arguments against JWT are made is because they are not using it correctly, think it is supposed to do something when they are not meant to do that thing, or are quick to dismiss JWT without being able to point to an alternative that solves their stated deficiencies. Your journey for evaluating if JWT fits your use case should start here: https://tools.ietf.org/html/rfc7519 https://tools.ietf.org/html/rfc7519
        • mixmastamyk 6y ago
          I read these here: https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-ba... https://news.ycombinator.com/item?id=16070394 https://news.ycombinator.com/item?id=16070394