JWKS explained: what every developer should know (opens in new tab)

When it comes to security, certificates are used everywhere since the early days of the web. While storing them in PEM/DER format has always been complicated, things have become much easier with the modern JWKS (J for JSON) format. And you're probably already using JWKS without knowing it, every time you validate a JWT from Google, GitHub, or your identity provider. 1) A word about cryptography We can use symmetric cryptography based on a secret. As this secret must be shared by both parties,...