4 ms·
Well sure, but your account email isn't safe to be public if your password is "password".
by anamexis 3y ago
Well sure, but your account email isn't safe to be public if your password is "password".
- mschuster91 3y agoEmail providers have rate limits against specific user logins, IAM not.
- hiatus 3y agoHow do you know that?
- mschuster91 3y agoThat's easy to find out: change the API credentials of a user, but forget to update the service. Notice only a few days later that you forgot the change, but you also never got any notification "something" is going wrong. In contrast, every half-decent IdP will lock an account automatically after anything from 3-10 wrong attempts.