Does an encrypted as well as signed web token make sense? Clearly, why are these almost none? Clearly, signed are unchangeable but also via HTTPS they say a lot about the user what (depending on the). It is not about security but about confidentiality.
#thoughts #token