4 ms·
I guess his point was that you know, the actual login screen should have happened before you were logged into the account. Then again, asking for re-confirmatio
by kamray23 5y ago
I guess his point was that you know, the actual login screen should have happened before you were logged into the account. Then again, asking for re-confirmation after pressing "cancel" is also a common thing.
- bmcahren 5y agoI greatly respect partially authenticated links when I'm emailed about service issues. The same would apply if I wasn't recently authenticated (using a cookie from more than a day ago). Provide read-only access then enforce auth only when mandatory for write permission. Ideally verify my hardware 2FA or a security code generator (but not sms).