Re:Simple passwordless authentication for web projects
by Tagbert on Tuesday February 22, 2022 @01:57PM
(#30431976)
It’s great if that is an option for you, but for many of us, if a site requires email logins, it is a fail. Much of the time, by the time the authentication email arrives, the login timeout has expired.
[ Parent
| on HN ]
Re:Simple passwordless authentication for web projects
by nickjj on Tuesday February 22, 2022 @03:55PM
(#30433635)
If a site makes it time out after 5-10 minutes that's on them.
An hour should be ample time for it to be delivered while offering a decent amount of security around token availability, especially since it should be revoked as soon as it's been used once.