Hacker News Reader

Paseto appears to be something that attempts to be "JWT but with sensible choices already made".

When it comes down to it, you need some crypto knowledge to make these choices. We constrain them to PS256 and ES256 in our system (but then you also need to make sure that the curve used for your keys for the ES256 signature is an acceptable one)

View on HN

Yeah, at this point, just use PASETO and be done with it. It's not worth trying to figure out which JWT misconfiguration will burn you next.

From pypaseto

“ This is still in early development. It has not been reviewed in a security audit yet, so please be aware that it is not expected to be ready for use in production systems.”

Is that remark about that specific implementation or the spec as a whole?

Just for the specific implementation. The reference implementation is the PHP version here:

https://github.com/paragonie/paseto

And has had a lot more attention.

Reply on news.ycombinator.com