2 ms·
Why not limit it to one email every five minutes or something?
by k__ 5y ago
Why not limit it to one email every five minutes or something?
- marginalia_nu 5y agoWell let's hypothesize I have a botnet and either I've spent a few months creating accounts, or I just have a list of email addresses from some breached site, and my army of 30,000 color changing lightbulbs and smart fridges are spamming login requests as fast as you'll let them. That's still a lot of emails even if just some are legit. Your option at that point is basically shutting down logins for everyone, or find yourself blacklisted.