2 ms·
Ah ok. Aren't both of these equivalent though? (I would think the point may be that a compromised email, doesn't provide access later. Both these scenario are
by shabda 15y ago
Ah ok.
Aren't both of these equivalent though?
(I would think the point may be that a compromised email, doesn't provide access later. Both these scenario are equally vulnerable then?)
- patrickyeon 15y agoIt would also be to make sure an attacker can't just iterate through or guess at the emailed URLs and get valid, logged-in sessions without needing to properly authenticate.