4 ms·
IMO it's going to result in a potential DoS by submitting guesses en masse, denying whole revoking whole company's access until key renewal.
by loa_in_ 2y ago
IMO it's going to result in a potential DoS by submitting guesses en masse, denying whole revoking whole company's access until key renewal.
- Ukv 2y agoKeys should have sufficient bits of entropy to not be guessable. And if a malicious actor can guess a key, you should want it revoked as opposed to them doing more serious damage through other endpoints.