5 ms·
Why would you even use blobs for forgot-password? Is there ever a reason to use them over a single-use, time-limited token?
by robmil 14y ago
Why would you even use blobs for forgot-password? Is there ever a reason to use them over a single-use, time-limited token?
- finnw 14y agoMaybe to defend against a DDOS attack that fills your database with unwanted tokens