corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0df1d-8270-70ca-80df-6aef17434b10

No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid

paragonie.com · published undated

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at paragonie.com Wayback capture
8blogs citing
First cited
15 Mar 2017
Most recent
29 Nov 2023
Rank this month
not ranked
Links from this post
24
Words captured
1,355

Cited by

Blog
In the post
Date
blog.ltgt.net
What are JWT? Read at the source ↗
29 Nov 2023
scottarc.blog
How to Write a Secure JWT Library If You Absolutely Must Read at the source ↗
6 Sept 2023
some_furry
Using RSA Securely in 2022 Read at the source ↗
10 Feb 2022
quanttype.net
JWT and its alternatives Read at the source ↗
30 Aug 2020
scottbrady.io
Alternatives to JSON Web Tokens (JWTs) Read at the source ↗
28 Apr 2020
techblog.bozho.net
Using JWT For Sessions Read at the source ↗
5 Mar 2018
appelsiini.net
Branca as an Alternative to JWT? Read at the source ↗
6 Aug 2017
neilmadden.blog
Should you use JWT/JOSE? Read at the source ↗
15 Mar 2017

Links from this post

Link
Host
Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.) Read at the source ↗
paragonie.com
https://tools.ietf.org/html/rfc7519
tools.ietf.org
https://tools.ietf.org/html/rfc7515
tools.ietf.org
https://tools.ietf.org/html/rfc7516
tools.ietf.org
You Wouldn't Base64 a Password - Cryptography Decoded Read at the source ↗
paragonie.com
http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/
cryto.net
http://cryto.net/%7Ejoepie91/blog/2016/06/19/stop-using-jwt-for-sessions-part-2-why-your-solution-doesnt-work/
cryto.net
https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/
auth0.com
Using Encryption and Authentication Correctly (for PHP developers) Read at the source ↗
paragonie.com
Everything You Know About Public-Key Encryption in PHP is Wrong Read at the source ↗
paragonie.com
https://tools.ietf.org/html/rfc7518
tools.ietf.org
https://eprint.iacr.org/2000/060.pdf
eprint.iacr.org
https://blogs.adobe.com/security/2017/03/critical-vulnerability-uncovered-in-json-encryption.html
blogs.adobe.com
https://tools.ietf.org/html/rfc7748
tools.ietf.org
http://bristolcrypto.blogspot.com/2015/01/real-world-crypto-2015-error-prone.html
bristolcrypto.blogspot.com
https://csrc.nist.gov/projects/post-quantum-cryptography/round-1-submissions
csrc.nist.gov
https://competitions.cr.yp.to/caesar.html
competitions.cr.yp.to
https://github.com/fernet/spec
github.com
https://github.com/paragonie/paseto
github.com
The Fast Track to Safe and Secure PHP Sessions Read at the source ↗
paragonie.com
Libsodium Quick Reference: Similarly-Named Functions and Their Use-Cases Read at the source ↗
paragonie.com
http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions
cryto.net
Split Tokens: Token-Based Authentication Protocols without Side-Channels Read at the source ↗
paragonie.com
One Login To Rule them All - Seamless and Secure Cross-Domain Authentication Read at the source ↗
paragonie.com