News for hackers. Stuff that matters.

A comment on If it's a nice problem to have, don't solve it now. Parent comment

Re:If it's a nice problem to have, don't solve it now by davnicwil on Tuesday August 11, 2020 @06:29AM (#24118918)
Security is foundational. It's not something to add later. Without it, signup is not done and shouldn't be shipped. Ironically, not having the reset password functionality actually reduces security bug surface area :-)
[ Parent | on HN ]
Re:If it's a nice problem to have, don't solve it now by afarrell on Tuesday August 11, 2020 @07:18AM (#24119164)
Which is an argument in favor of leaving off some features. Don't half-ass password reset. Wait until you have the need to whole-ass it and make things conceptually-coherent.
[ Parent | on HN ]