Top all-time · #19832
Tinker, Tamper, Alter, Fry
Personal blog · blog.ploetzli.chsecurityprogramming
Tinker, Tamper, Alter, Fry is a personal blog at blog.ploetzli.ch about security and programming. Since 2024, 3 different Hacker News readers have linked it 3 times, most often “Should I use JWTs for authentication tokens?”. It is still writing: the last post was on 2025-05-18, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers cite this blog's post on whether small websites should use JWTs for authentication, in a thread about building your own auth system. Only one comment mentions it.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Should I use JWTs for authentication tokens?2 people · 2 mentions · first linked 2024-05-27
What Hacker News says?
It's actually very easy to implement your own authentication. You should use either Argon2 or Bcrypt to store passwords. If the website is small, you shouldn't use JWTs (see https://blog.ploetzli.ch/2024/should-i-use-jwt-for-authentic... ). Ideally, you should use an encrypted HttpOnly cookie with SameSite=strict, etc. which you can optionally sign just like you would sign a JWT although that's unnecessary. You migh…
Comment linking /2024/should-i-use-jwt-for-authentication/
on “Has anyone built their own authentication system?”Submitted Should I use JWTs for authentication tokens? as a story · 577 points
HN discussionSubmitted Docker Best Practices: Read-Only Containers as a story · 3 points
HN discussion