anon1252

25 ms·

1.
by anon1252 8y ago
> JWTs are a silver bullet, but it's nicer than rolling your own signing scheme. you can use HMAC to sign session cookies as well, the issue isn't about signing.
2.
by anon1252 8y ago
> Traversing a list of 100,000 users/sessions in a db to pull up the session is a different beast compared to traversing an in memory list of 10-100 revoked JTIs in redis. It is a lot less data to store and optimize (the full sessio
3.
by anon1252 8y ago
> Ok, yes, session is a concept. Session state can be stored in its entirety or split between an ID and body. the storage of session has absolutely nothing to do with the session. I'm not sure why you keep talking about Cookies it h
4.
by anon1252 8y ago
Yes it does mean something. a session is something that is identified by an ID on the client and is persisted on the server with the corresponding ID. It's a concept. It doesn't have to be stored in a cookie. A session can be repr
5.
by anon1252 8y ago
> Cookies are special headers added to HTTP requests to store state. The topic is more about session VS JWT, not cookies vs whatever local storage is used in place of cookies.
6.
by anon1252 8y ago
> and expiring it when you log-out? and how would you do that if the user doesn't actively log out of a service?
7.
by anon1252 8y ago
The idea of JWT is basically you give your user a "token" that can be used against many "services" while servers don't have to persist the state of that token, just be able to read the encrypted token, and trust the
8.
by anon1252 8y ago
I would absolutely subscribe to a email service with a 5/10/15 dollars one time payment.
9.
by anon1252 8y ago
> Shouldn't employees have the right to collectively strike to get better conditions at work? There's a lot more at stake here than "drama for the company". Doesn't the employer have the right to fire them for an
10.
by anon1252 8y ago
> there's no real process in place for situations of misconduct in the office. There shouldn't be a "process" set by Google when it comes to sexual harassment, employees should be able to sue, that's the process,
11.
by anon1252 8y ago
> What would make you think there's a lack of outrage related to the US and Iraq + Afghanistan? Where is the outrage right now? where is the outrage over the slaughter of children in Yemen by the Saudis using US weapons? I don'
12.
by anon1252 8y ago
> There are 40 enemy combatants held at Guantanamo. They have public legal representation and visitation rights. They are being held there without a trial. They have not been tried before being sent there. > Please enlighten me as to