3 ms·
How is it invalidated that you need the password mechanism to access your emails? Why would you put resources into annoying your users to sign into their email
by a_imho 10y ago
How is it invalidated that you need the password mechanism to access your emails? Why would you put resources into annoying your users to sign into their email accounts too every time they want to use your service? It is a very bad design imo.
Yes, password reset can be abused, but doing it all the time I would consider a security hole.
- StavrosK 10y agoI guess the bullet points aren't the ones that are invalidated, it's the argument that sending a secret key over email to sign in is worse for security than having a password. It's not worse, it's strictly better, as right now everyone implements both ways and an attacker only needs to break the weakest one.
- a_imho 10y agoDo not quite agree. Clearly having more attack surface is worse, but pushing large amounts of sensitive information through mail servers is increasing that surface as well.
- StavrosK 10y agoHow so? Any attacker can trivially push the information they're interested in right now anyway.
- a_imho 10y agoIf many were to change to email based auth the chances of any leaked (accidentally sent, tricked into forwarding etc) email containing sensitive info would go up significantly. E.g. any mail from medium.com has a very high probability of containing login info. Second, increased roi makes mail servers more of a target.