4 ms·
>We're developing a simply secure alternative, called PASETO (Platform-Agnostic Security Tokens). Of course. Because a new unproven, untested security standard
by macspoofing 5y ago
>We're developing a simply secure alternative, called PASETO (Platform-Agnostic Security Tokens).
Of course. Because a new unproven, untested security standard will fix things ... and certainly doesn't introduce it's own set of issues and vulnerabilities (https://xkcd.com/927/ https://xkcd.com/927/)
The reality is that much of the problems with JWT came from misconfigured (or not configured) libraries. That's an issue for sure.
On the other hand JWT is used by EVERYONE so they are a known-factor and there's value in the fact that this standard has been battle-tested across many companies, and use-cases.