News for hackers. Stuff that matters.

A comment on Is Your Site Leaking Password Reset Links?. Parent comment

Re:Is Your Site Leaking Password Reset Links? by anton_gogolev on Monday October 24, 2016 @09:23AM (#12778500)
If you could somehow encode the value of "PasswordLastUpdatedAt" in your token, you will then could have truly "stateless" tokens.
[ Parent | on HN ]

There are no comments on this comment yet.