3 ms·
> One beef I have with short session expiration, though, is that in many cases it causes people to degrade security. One counterpoint—if sessions last too long
by klodolph 3y ago
> One beef I have with short session expiration, though, is that in many cases it causes people to degrade security.
One counterpoint—if sessions last too long, then I forget the password, and reset the password. If sessions are too short, then I choose an insecure password. Neither option is great for security!
Talking about systems for which a password manager doesn’t make sense, like your lock screen password.
- konschubert 3y agoIf you're remembering your passwords then you are probably using insecure passwords or are re-using passwords across multiple services.
- GoblinSlayer 3y agoWhat you don't like in the first option? If you need password reset feature, then it's necessary. If you don't need it, then remove it.