The parts of JWT security nobody talks about - Event video
Following our successful event, we’d like to share the Videos with you.
The parts of JWT security nobody talks about by Philippe De Ryck, Founder of Pragmatic Web Security, Google Developer Expert
JSON Web Tokens (JWT) have become the de facto standard to transfer application claims between the client and the server. By design, they incorporate the use of signatures to ensure the integrity of the data. However, merely signing the data alone is not enough to guarantee security.
In this talk, we zoom into the security properties of JWTs. After introducing the different signature schemes, we dive into the hard parts nobody talks about. How do you manage and identify the keys used for the signature? How do you handle key rotation? And what about encrypting JWTs? This talk answers all these questions. You will walk away with a set of best practices for adequately securing JWTs.
Infrastructure Fuzzing by Salo Shp, SRE Expert
In this session We will cover the reason and methods hackers use to DDOS our production, and learn how to mitigate that threat by doing it ourselves as part of an overall Chaos Engineering methodology.Invite this lecture for your team