Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Simpler != cheaper WRT resource consumption. Not having to hit a DB means not having to replicate the DB to respond quickly, and having one fewer point of failure.

If you can live with quickly expiring, quickly reissued crypto tokens like JWT, it's a boon.

But JWT definitely don't work for web auth. They can be used as CSRF tokens, though.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: