Re:Peach App Token Reuse Flaw
by dwightgunning on Tuesday January 19, 2016 @03:59AM
(#10929449)
I agree although I think about it more in terms of development and maintenance effort.
There's plenty of other relatively computationally and IO intensive activity happening during login so I can't see an extra select having a tangible impact to performance.
Re:Peach App Token Reuse Flaw
by Alex3917 on Tuesday January 19, 2016 @08:21AM
(#10930499)
The issue isn't tokens getting created on login, it's them getting validated on every request. That's already 40-50ms, even without the db hit each time.
There's plenty of other relatively computationally and IO intensive activity happening during login so I can't see an extra select having a tangible impact to performance.