4 ms·
This is more secure overall. The problem with short sessions is that users who do not think about them sign in more often. This makes typing your credentials m
by mgraczyk 4y ago
This is more secure overall.
The problem with short sessions is that users who do not think about them sign in more often. This makes typing your credentials more normal and makes phishing attacks more common. Reducing the rate at which users enter credentials is generally a good thing.
Users who are thinking about having a short session know how to clear site history when they are done, or click "sign out".
- avodonosov 4y agoWell, my interest is exactly to enter the password more often, so that I do not forget it. Your reasoning is questionable. Fishing attacks more likely? Maybe yes, maybe no. I personally am very cautios of any login initiated from email and other messages. I do not know how to clear site history (how?), and do not want whole history cleared; it is useful to have login names saved, for example. I only want an option to not keep the browser signed-in persistently. Manual sign-out from every site I have in many browser tabs is not practically reliable.
- 0xbadcafebee 4y agoUse a password manager and you'll never have to remember it!
- ed25519FUUU 4y agoIf you can remember it then it’s probably not a very secure password.