3 ms·
Why the hell were they storing it? just delete it after marking the account as verified.
by Andys 4y ago
Why the hell were they storing it? just delete it after marking the account as verified.
- viraptor 4y agoEven if it needs to be verified afterwards, the numbers could be bcrypted with high enough iteration count to make them impossible to brute force but easy to verify every few years if necessary... Say 10sec per id?