Hacker News Reader

As a JWT replacement, I prefer PASETO: https://paseto.io/

PASETO is great! It's way better than JWT, for the use cases targeted by JWT. Biscuit explores other use cases, like attenuation

Why?

See the link at the top, it explains all the problems with JWT/JOSE.

But also PASETO is an unopinionated token format with strong security guarantees from using modern cryptographic algorithms.

Edit: Looks like the ParagonIE website is returning 502s right now. Here's the archive: https://web.archive.org/web/20230123041631/https://paragonie...