(Munich, May 14) On the 14th local time (the 15th in Japan), the JWT and JOSE specifications—covering a concise JSON-based security token and cryptographically protected, Web-friendly data formats—won the Special European Identity Award for Best Innovation for Security in the API Economy. The specifications honored were:
- JSON Web Token (JWT)
- JSON Web Signature (JWS)
- JSON Web Encryption (JWE)
- JSON Web Key (JWK)
- JSON Web Algorithms (JWA)
Their authors are:
I would also like to note that Dirk Balfanz, Yaron Goland, John Panzer, and Eric Rescorla [1] made special contributions to these specifications. @kjur, @nov, Edmund Jay, Vladimir Dzhuvinov, and all the others [2] who built implementations of these specifications and carried out interoperability testing also deserve great recognition. On a personal note, I would also like to express my deep gratitude to Nomura Research Institute for sponsoring my work on them.
Mike Jones, John Bradley, and I accepted the award. Mike is keeping the certificate, and John is keeping the trophy.
You may not realize it, but JWT is used quite widely. For example, if you use the Google Play Store on an Android phone, you are using JWT.
So everyone, go ahead and use JWT, JWS, and JWE with confidence! Especially you—yes, you, the developer!
[1] The authors of the specifications that were incorporated into JWx
[2] We should make a separate list.
Related posts
JWS and JWT Are Now RFCs!
It took a very long time[1], but JSON Web Signature (JWS) and JSON Web Token (JWT) have finally become Standards Track RFCs[2]. They are [RFC 7515]…
Celebrating RFC 9901! SD-JWT Becomes an Internet Standard — A New Rule for the Digital ID Wallet Era: “Show Only What Is Necessary” — An Overview of SD-JWT, the Core Format Supporting Verifiable Credentials and Identity Wallets
1. The Birth of RFC 9901 On November 19, 2025, the specification defining “Selective Disclosure for JSON Web Tokens,” commonly known as SD-JWT (pronounced “ess-dee-jot”), was…
Standardization of JSON Web Signature (JWS) Has Begun at the IETF
Standardization of JSON Web Signature, a standard for attaching signatures to JSON, has begun in the IETF JOSE Working Group[1]. The initial draft is: http://tools.ietf.org/html/draft-ietf-jose-json-web-signature-00 My…
You must be logged in to post a comment.