4 ms·
The blacklist can be compromised, which is a larger vulnerability than having no blacklist.
by Daniel_Newby 14y ago
The blacklist can be compromised, which is a larger vulnerability than having no blacklist.
- toomuchtodo 14y agoI blacklist is modified, notify me via SMS (the same way Google/Facebook can handle you not able to get into your account).
- TeMPOraL 14y agoIt's not about modifying; just reading the addresses you don't want to send mails to is informing enough.
- toomuchtodo 14y agoDon't display them to the user without two-factor authentication then. Everything can be compromised at some point.
- samt 14y agoSave only the hash, or use a data structure like a bloom filter.