4
votes
Accepted
Should an access token really be cryptographically signed?
Signed cookies/tokens are particularly useful when either
the token is issued by one party but must be verified by a third party; or
the contents of the token are guessable, so that tampered/forged ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
web-applications × 1053web-development × 264
architecture × 111
design × 96
javascript × 91
java × 71
database × 68
php × 67
rest × 59
web-services × 59
security × 46
design-patterns × 43
api × 43
python × 38
mvc × 32
web-api × 30
web × 30
database-design × 29
websites × 27
authentication × 25
asp.net × 24
api-design × 23
http × 21
programming-practices × 20
mobile × 20