Hacker News Reader

https://cybercx.co.nz/blog/json-web-token-validation-bypass-...

This is really old. JWTs are very safe.

JWT is a bad spec leading to stupid mistakes all over the ecosystem. "Just be very careful in all of the implementations forever" is a horrible security stance.

Reply on news.ycombinator.com