> Robust, unique and not breached What? If they're not breached then that invalidates the other two points anyway - unless you can find an authentication endpo

> Robust, unique and not breached What? If they're not breached then that invalidates the other two points anyway - unless you can find an authentication endpoint that doesn't rate limit. HTTP proxies are expensive and trying to brute force something that is on-server is not a common attack vector. I know its nit-picking, but the title is incendiary and warrants that.