Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Student
Impact
~108 people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Jan
31
awarded  Student
Jan
31
comment Authentication for 'participants' vs 'users'
You're correct. My concern was, from a security perspective, was I losing anything in not asking the user to type in an auth code (apart from potentially making automated attacks easier). On balance, probably not, so I think I'll remove it.
Jan
31
comment Authentication for 'participants' vs 'users'
Does it really buy you anything if you have an encrypted auth code on in the query string? Aren't you just increasing the search space for valid combinations whether or not there's a relationship between the invitation id (already in the query string) and the auth code?
Jan
31
asked Authentication for 'participants' vs 'users'
Mar
10
awarded  Supporter