3 ms·
Do you mean a username that is distinct from email or phone number? If so, why does that provide protection against credential stuffing? A username can be reus
by mooreds 1y ago
Do you mean a username that is distinct from email or phone number?
If so, why does that provide protection against credential stuffing? A username can be reused across different applications.
What am I missing?
- jaratec 1y ago> Do you mean a username that is distinct from email or phone number? No, he means a unique user id, generated by the server when you sign up for the service. Then for every login attempt, you provide the username/email + user id + password.
- mooreds 1y agoThanks. Would love to hear from other folks who have implemented this on how it affects the user experience. Seems to me it'd be high friction.