Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
anon1252
on Nov 1, 2018
|
parent
|
context
|
favorite
| on:
Stop using JWT for sessions (2016)
> JWTs are a silver bullet, but it's nicer than rolling your own signing scheme.
you can use HMAC to sign session cookies as well, the issue isn't about signing.
Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
you can use HMAC to sign session cookies as well, the issue isn't about signing.