4 ms·
If your threat model includes hostile mail relays, you probably shouldn't be using bargain basement VPS providers. Password-reset emails are also easy for an a
by waitwhat 15y ago
If your threat model includes hostile mail relays, you probably shouldn't be using bargain basement VPS providers.
Password-reset emails are also easy for an attacker to generate, and no harder for them to intercept than the welcome email.
- jsn 15y agoRight, that's what GP said in the comment you replied to: that he probably should not use that VPS provider. And yes, password-reset emails may also be a concern (not as severe, though, if reset emails are single-use and have short TTL).
- simonbrown 15y agoBut you at least know your account has been compromised.