> I am wondering how that relates to searching for the token in a database (index). Does it still matter? It can, but the practicality of exploiting this timin

> I am wondering how that relates to searching for the token in a database (index). Does it still matter? It can, but the practicality of exploiting this timing leak isn't at all a settled issue. Previously, https://soatok.blog/2021/08/20/lobste-rs-password-reset-vulnerability/ https://soatok.blog/2021/08/20/lobste-rs-password-reset-vuln...