3 ms·
As a JWT replacement, I prefer PASETO: https://paseto.io/ https://paseto.io/
by francislavoie 4y ago
As a JWT replacement, I prefer PASETO: https://paseto.io/ https://paseto.io/
- tasuki 4y agoWhy?
- francislavoie 4y agoSee the link at the top, it explains all the problems with JWT/JOSE. But also PASETO is an unopinionated token format with strong security guarantees from using modern cryptographic algorithms. Edit: Looks like the ParagonIE website is returning 502s right now. Here's the archive: https://web.archive.org/web/20230123041631/https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid https://web.archive.org/web/20230123041631/https://paragonie...
- geal 4y agoPASETO is great! It's way better than JWT, for the use cases targeted by JWT. Biscuit explores other use cases, like attenuation