JWT (JSON Web Tokens) is a Bad Standard That Everyone Should Avoid — Scott Arciszewski

Scott Arciszewski explains why JOSE (Javascript Object Signing and Encryption) is a bad standard that everyone should avoid. Note that JOSE is part of JSON Web Tokens to which not all of the complaints and issues apply.