THE VIDEO SHELF · JOSE and JWT cryptography flaws
DEF CON 26 CRYPTO AND PRIVACY VILLAGE - Scott Arciszewski - No Way JOSE! Designing Cryptography
Scott Arciszewski's DEF CON 26 Crypto and Privacy Village talk critiquing the JOSE standards (JWT, JWS, JWE) and showing how to design cryptographic tokens more safely.
Why HN readers recommended it
HN recommends it as the video version of the argument that JOSE/JWT is a flawed standard, and as a help in understanding token design choices.
This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.
Video & recommendation details
- Creator / channel
- DEFCONConference
- Topic
- JOSE and JWT cryptography flaws
- Format
- talk
- Level
- intermediate
- HN recommenders in dataset
- 2
- HN mentions in dataset
- 3
- Recommendation years in dataset
- 2019–2020
These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.
From the original HN conversations
Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.
If you like video consumption, a DEFCON 2018 talk by the author Scott Arciszewski on this same topic can be found here: No Way JOSE! Designing Cryptography: [VIDEO] You're welcome :) Edit: Clarify that Scott is the author of both post and video.
wadkar on Hacker News · 2020-02
In Javascript Object Signing and Encryption is a Bad Standard (2017)I've been doing a similar thing recently. I found PASETO to be interesting ( [LINK] ), which is a lot like JWT but is simpler and more opinionated (e.g. there is no plaintext option; symmetric and asymmetric operations are cleanly separated; etc.). I especially enjoyed …
chriswarbo on Hacker News · 2020-06
In Hardcoded secrets, unverified tokens, and other common JWT mistakes
Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.