Hellow guys, Welcome to my website, and you are watching Should you use HS256 with JWTs?. and this vIdeo is uploaded by Jan Goebel at 2021-10-11T06:00:11-07:00. We are pramote this video only for entertainment and educational perpose only. So, I hop you like our website.
| Name | Should you use HS256 with JWTs? |
| Video Uploader | Video From Jan Goebel |
| Upload Date | This Video Uploaded At 11-10-2021 13:00:11 |
| Video Discription | 🔥More exclusive content: https://productioncoder.com/you-decide-what-we-build-next Twitter: https://twitter.com/_jgoebel Website: https://jangoebel.com Blog: https://productioncoder.com 00:00 MACs (like HMACs) and digital signatures (like RS256) provide different guarantees 00:55 potential use case for HS256 01:32 you might still be better off with digital signatures 02:30 HS256 for client side sessions HS256 is an algorithm used with JSON Web Tokens to to MAC the header and the claim set of the token. The downside of using an HMAC based token is that you need to know the secret to verify the MAC. For security reasons it is oftentimes not feasible to have a shared secret. That's why people oftentimes make use of public key cryptography and of digital signatures. With digital signatures you generate a private and a public key. With the private key you can sign a message, i.e. create a digital signature. With a public key, you can only verify a signature, but you cannot create a signature by yourself. It is more common in the industry to rely on public key cryptography based tokens and signing algorithms such as RS256 and ES256. It is recommended that you prefer ES256 over RS256 because it can provide similar security guarantees like RS256 but with way shorter key sizes. |
| Category | Education |
| Tags | json web token | jwt hmacsha256 | jwt rsa | jwt rsa 256 | jwt rs256 example | jwt rs256 vs hs256 | jwt | hmac and digital signatures | should you use HS256 | hs256 vs rs256 | hs256 vs rsa 256 |
