3 ms·
Agreed, and also they tend to be more guessable. Make a page available with an email address as the id and just watch the hackers use it to discover users of yo
by twodave 2y ago
Agreed, and also they tend to be more guessable. Make a page available with an email address as the id and just watch the hackers use it to discover users of your service and attempt to log in as them.
- sgarland 2y agoThat is an AuthZ problem, orthogonal to DB key debates.