4 ms·
Rate limit by what? Username? IP?
by j88439h84 8y ago
Rate limit by what? Username? IP?
- the8472 8y agoper user if you want to defend against targeted attacks. per IP if you want to prevent untarged attacks. so, both. add an email-reset for the limit so users can't be locked out of their accounts by a DoS.