4 ms·
It is annoying but it generates far fewer support requests for people who can't remember a password and think resetting it is too difficult. With a long enough
by yurishimo 2y ago
It is annoying but it generates far fewer support requests for people who can't remember a password and think resetting it is too difficult.
With a long enough session life and a good refresh strategy, it's less of a problem. If an app clears sessions after a week, then I would argue they are doing it wrong.
- ksynwa 2y agoI think they also want to thwart folks like me who are possibly going to use a temporary email site to make an account.
- mdaniel 2y agoDepending upon one's threat model, I found that the "public" version of throwaway emails still work great for that purpose, versus sites like 10minutemail which destroy the address after a time. Sure, I am cognizant that if I just went surfing around (e.g.) https://www.mailinator.com/v4/public/inboxes.jsp?to=ksynwa https://www.mailinator.com/v4/public/inboxes.jsp?to=ksynwa long enough I could probably snag any hypothetical login link to HipsterLoginLink.co but in practice I doubt it's an issue