Stop Using JWTs
Hacker News (AI keywords)41 days agoOpinionA pointed opinion piece challenges the widespread adoption of JSON Web Tokens (JWTs) for session management, a practice that has become near-default in modern web development. The author argues that JWTs introduce unnecessary complexity and security pitfalls that traditional server-side sessions do not. Developers are encouraged to reconsider default technology choices and reach for simpler, more auditable authentication patterns.
Lies we tell ourselves about email addresses
Hacker News (AI keywords)50 days agoOpinionDevelopers routinely underestimate the complexity of email address validation, relying on oversimplified regex rules that fail on edge cases allowed by RFC standards. Common myths include case-insensitivity, deliverability implied by syntax validity, and uniqueness assumptions that break with subaddressing or dot-normalization. The article serves as a reminder that email, despite feeling familiar, remains a surprisingly deep protocol with many traps for the unwary.