Tagged articles

Stateless Authentication

3 articles · Page 1 of 1

May 25, 2026 · Information Security

Why Big Tech Shuns MD5 for Passwords: Inside Bcrypt and JWT Security

The article explains why modern systems avoid MD5 for password storage, details how Bcrypt’s deliberately slow, salted hashing thwarts brute‑force attacks, and shows that JWT provides stateless authentication whose security relies on signatures rather than encryption, while also discussing token revocation and DoS mitigation.

JWTMD5Security

0 likes · 7 min read

Why Big Tech Shuns MD5 for Passwords: Inside Bcrypt and JWT Security

Java Companion

Apr 14, 2026 · Information Security

Why Interviewers Mock Storing Tokens in Redis—and How to Answer Correctly

The article explains JWT fundamentals, why pure stateless tokens cannot be revoked, compares blacklist and whitelist Redis strategies, discusses token renewal with double‑token design, and shows how to articulate the right answer in an interview.

BlacklistJWTRedis

0 likes · 13 min read

Why Interviewers Mock Storing Tokens in Redis—and How to Answer Correctly

Java Captain

Feb 19, 2020 · Information Security

Stateless Login Principle and Implementation Using JWT and RSA

The article explains the drawbacks of stateful authentication, defines stateless services, describes a token‑based login flow using JWT with RSA asymmetric encryption, and shows how to integrate this approach into a Zuul‑based microservice architecture to achieve scalable, secure, and session‑free authentication.

JWTRESTRSA

0 likes · 9 min read

Stateless Login Principle and Implementation Using JWT and RSA