Hacker News new | ask | show | jobs
by Lucasoato 18 days ago
If I use short-lived JWTs and localstorage, am I such a bad person? Are you truly increasing the blast radius?

Is there someone in another part of the world that would like hacking you only if you’re not using httpOnly cookies, happy to know that you used localstorage?