JWTs and Why They Suck
Offered By: Security BSides London via YouTube
Course Description
Overview
Explore the pitfalls and limitations of JSON Web Tokens (JWTs) in this 15-minute conference talk from Security BSides London. Delve into the reasons why JWTs may not be the ideal solution for many applications, covering topics such as irrevocability, excessive flexibility, and potential security risks. Learn about common misconceptions surrounding the necessity of JWTs and discover alternative approaches that may better suit your needs. Gain valuable insights into secure authentication and authorization practices, supported by references and practical recommendations.
Syllabus
Intro
how do i JWT
Irrevocable
JSON
YOU DON'T NEED IT
Too flexible
Footguns
Why you think you need JWTS
What to use instead
References
Taught by
Security BSides London
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network