3 ms·
JWTs can be encrypted and signed, or just signed (or signed alg: none).
by quesera 4y ago
JWTs can be encrypted and signed, or just signed (or signed alg: none).
- cogman10 4y agoAh, didn't realize encryption had made it into the spec.
- P5fRxh5kUvp2th 4y agostop being snarky, there are RFC's describing JWS and JWE, people just use the term JWT generically and let the context dictate what they're actually referring to.
- cogman10 4y agoYou are reading my comment uncharitably. I did not know that encryption had made it in the JWT spec. My comment was supposed to convey surprise, not some sort of snark or sarcasm. I read the spec after the OP comment and learned something new today.