News for hackers. Stuff that matters.

A comment on Ask HN: Why aren't one-time sign in links more popular for authentication?. Parent comment

Re:Ask HN: Why aren't one-time sign in links more popular fo... by squiggleblaz on Monday January 04, 2021 @06:30AM (#25630002)
How do you advise we handle email address confirmation and password resets?
[ Parent | on HN ]
Re:Ask HN: Why aren't one-time sign in links more popular fo... by aaronhayes on Monday January 04, 2021 @06:42AM (#25630100)
Automatically expire the links
[ Parent | on HN ]
Re:Ask HN: Why aren't one-time sign in links more popular fo... by squiggleblaz on Monday January 04, 2021 @07:04AM (#25630252)
Yeah but you can do that with login token URLs as well. The person I replied to said "you can never do that", not "you can do that only if you exercise suitable caution". I am asking for an alternative that fits with the "you can never do that" perspective, not a way to backpedal.
[ Parent | on HN ]
Re:Ask HN: Why aren't one-time sign in links more popular fo... by squiggleblaz on Monday January 04, 2021 @09:31AM (#25631758)
Apparently I completely ignored the first comment in the original post. Apologies.
[ Parent | on HN ]