markjgsmith

Today’s links:

• Stop using JWT for sessionscryto.net #

• Stop using JWT for sessions, part 2: Why your solution doesn't workcryto.net #

• Listening to users is the first step in making them secureboingboing.net #

• Using secure client-side sessions to build simple and scalable Node.JS applicationshacks.mozilla.org #

• The Admins are suffering from low energy - have resorted to editing YOUR posts. Sad!www.reddit.com #

• Query about accessing HttpOnly Cookie & Secure cookiestackoverflow.com #

• How does cookie "Secure" flag work?stackoverflow.com #

• Backpacking Medellín, Colombia - A Beginner’s Guidewww.goatsontheroad.com #

• Securing API Keys in a Client Side JavaScript Appbillpatrianakos.me #

• Securing a JavaScript Single Page App with RESTful backendsecurity.stackexchange.com #

• cakephp - Using Sessions vs Tokens for API authenticationstackoverflow.com #

• Keeping API Credentials Secure at the Applicationmasherydev.tumblr.com #