3 ms·

How would you rate-limit an unauthenticated-by-definition endpoint?

• fullstop 5y ago
  By IP. It doesn't have to be limited by much, just enough to discourage brute force attempts.