[big_youth]

> I thought this was common knowledge on HN?

Just as an aside but I would never say this, this is why people hate security teams. I'm a security 'expert' with 15+ years in the industry including speaking at DEFCON, Blackhat, and all that.

I had no idea about these issues and have never heard of PASETO until now! I'm actually a few months in into my startup and we are using JWT for a lot of stuff so this is very relevant. Thanks for sharing! But if I can't keep up with everything then devs who don't do this all day simply cannot.

[some_furry]

Okay fair. I just see it come up in every thread about JWT security, so I felt like I would be Captain Obvious for calling it out.