Please get back to me when you have a an implementation on the JVM that doesn't require libpaseto. The reason JWT is used everywhere is because it's usable on

Please get back to me when you have a an implementation on the JVM that doesn't require libpaseto. The reason JWT is used everywhere is because it's usable on almost every stack you could possibly imagine. We all agree that JWT had some egregiously bad design decisions in the past that have all been papered over in most libraries. Compared to XMLDSig, JWT is much better and XMLDSig has been widely deployed and used for almost 2 decades at this point, including some very high security applications.