Don’t Get Clever with Login Forms

Re:Don’t Get Clever with Login Forms by bduerst on Friday February 15, 2019 @04:56PM (#19175080)

This default is only going to create security risks as users login on public-facing devices, like a library or device they don't own.

I hope you don't make PII or transactions available inside your app, otherwise I would urge escalating this issue internally.

[ Parent | on HN ]

Re:Don’t Get Clever with Login Forms by Scooty on Friday February 15, 2019 @05:33PM (#19175348)

I'm probably in the minority, but I just expect web sessions to persist regardless of what checkboxes I check. If I have to login to anything on a computer that isn't mine, I just open a private session (usually incognito in Chrome).

[ Parent | on HN ]