4 ms·
> Probably the best thing to do is set the access count limit to one. You’d better use at least two. Nearly every email service in 2021 has anti-malware and an
by tatersolid 6y ago
> Probably the best thing to do is set the access count limit to one.
You’d better use at least two. Nearly every email service in 2021 has anti-malware and anti-phishing which was inspects links as a security feature. This often breaks poorly designed “one time” links like password resets that incorrectly use non-idempotent GET requests.
- justusthane 6y agoInteresting, good point. Unfortunately that means that you can no longer be sure that it hasn't also been accessed by a malicious third party though.
- mhdhn 6y agoNow you're in a trust relationship with receiving party's antispamware? Great