111 reputation
2
bio website neataudio.com
location Dublin, Ireland
age 45
visits member for 3 years, 5 months
seen May 25 at 7:48

Jan
31
awarded  Student
Jan
31
comment Authentication for 'participants' vs 'users'
You're correct. My concern was, from a security perspective, was I losing anything in not asking the user to type in an auth code (apart from potentially making automated attacks easier). On balance, probably not, so I think I'll remove it.
Jan
31
comment Authentication for 'participants' vs 'users'
Does it really buy you anything if you have an encrypted auth code on in the query string? Aren't you just increasing the search space for valid combinations whether or not there's a relationship between the invitation id (already in the query string) and the auth code?
Jan
31
asked Authentication for 'participants' vs 'users'
Mar
10
awarded  Supporter