hackertube.io

DEF CON 26 CRYPTO AND PRIVACY VILLAGE - Scott Arciszewski - No Way JOSE! Designing Cryptography

DEFCONConference · talk · Watch on YouTube

CryptographySecurity & hacking

What it is

Scott Arciszewski's DEF CON 26 Crypto and Privacy Village talk critiquing the JOSE standards (JWT, JWS, JWE) and showing how to design cryptographic tokens more safely.

Why Hacker News recommends it

HN recommends it as the video version of the argument that JOSE/JWT is a flawed standard, and as a help in understanding token design choices.

  • 2 people recommended it
  • 2 different months
  • 0 strong recommendations
  • first 2019, last 2020

What HN commenters said

  1. “If you like video consumption, a DEFCON 2018 talk by the author Scott Arciszewski on this same topic”

    Video version of the author's JOSE critique.

    wadkar, 2020-02 · Recommendation · in “Javascript Object Signing and Encryption is a Bad Standard (2017)”

  2. “I especially enjoyed watching this video”

    Helped commenter understand token design choices.

    chriswarbo, 2020-06 · Recommendation · in “Hardcoded secrets, unverified tokens, and other common JWT mistakes”

Excerpts from Hacker News comments, linked to the originals. Summaries and labels were written by a language model from those comments.

Topics: jwt, jose, cryptography, tokens, def con, authentication

Also recommended by the same people