[jongjong]

Interesting. I thought the exact same thing but shrugged it off as far-fetched... but reading this makes me think twice.

I guess in this case, you have a security company advocating against JWT... I guess it could mean that JWT is bad for their business because their business relies on applications to be insecure in order to sell the solution?

Or is it some kind of conspiracy against single-sign-on?