"submit email address, receive tokenized URL in an email" ... is a known-vulnerable antipattern, because email normally exposes that token to third parties. h

"submit email address, receive tokenized URL in an email" ... is a known-vulnerable antipattern, because email normally exposes that token to third parties. http://www.goironbox.com/why-email-is-not-secure/ http://www.goironbox.com/why-email-is-not-secure/