3 ms·Add a captcha then.by ummonk 7y agoAdd a captcha then.tylerhou 7y agoStill not hard to manually DOS. And to do it at scale you only have to pay 2.5 cents per invalidation.merb 7y agowell you can't dos a user forever. and it's quite impossible that somebody knows that a user lost it's password and DOS's the reset mechanism.