Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If someone nefarious steals your <secret something> then yes you have problems, this isn’t anything unique to JWTs


It makes a pretty big difference whether you have to send the secret down the wire to prove you possess it (e.g. a JWT, unlike say a private key).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: