Skip to main content
CPEBuddy
JWTs The Good, the Bad, and the Ugly Security Edition

JWTs The Good, the Bad, and the Ugly Security Edition

Source: YouTube · SANS Cloud Security · published Apr 4, 2024 · 46:24

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

JWTs exist because HTTP was originally stateless.

Key Takeaways:
• The speaker, Joshua Broney, is a Sans instructor and software architect with a background in security 0:00.
• JSON Web Tokens (JWTs) became necessary due to the stateless nature of the HTTP protocol 0:33.
• HTTP was initially designed for static "brochure" websites, lacking built-in mechanisms for maintaining user sessions 0:48.

Understanding the historical context of HTTP helps explain why JWTs are the standard for modern authentication.

Sources:

  • 0:00 Speaker introduction and background.
  • 0:33 Introduction to the topic of JWTs.
  • 0:48 Historical context of HTTP and static websites.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Uh, so just a quick little bit about me. My name is Joshua Broney. I am a Sans instructor. I've been teaching with Sans for a while now. I'm also a software developer and software architect by trade and I like to call myself a security official auto. I have been dealing in the world of security, cyber security for a long time. Mostly getting my start as a developer who had code being abused and learning how that happened and how to stop it. Um, and just keeping up with all the the greatest trends in security since then. So to jump into our topic, I want to first start with the why. The how did we even get here? Why are JSON web tokens a thing? Why do we use them? And to start the conversation, we kind of need to get in the wayback machine and go back to the beginning of the web. When the H…