3 ms·
Using the URL as an authentication token is something different and has some insidious security properies for all the various ways that URLs can leak. At the v
by zaroth 9y ago
Using the URL as an authentication token is something different and has some insidious security properies for all the various ways that URLs can leak.
At the very least you must place the token after the '#' in the URL, disable Google crawling in robots and turn off certain indexing modes using Webmaster tools.
- gruez 9y agojudging from the parent post >[...] that helps you track alt coin earnings. Just enter your wallet addresses [...] makes me think that the it's view-only anyways. even if you got a hold of the wallet address (authentication token), it's not like you can redirect the payout to somewhere else. and while it's true you can see another user's earnings, that information is publicly available on the blockchain anyways.