Re:Short session expiration does not help security
by konschubert on Friday August 18, 2023 @11:30AM
(#37176989)
If you're remembering your passwords then you are probably using insecure passwords or are re-using passwords across multiple services.
Re:Short session expiration does not help security
by GoblinSlayer on Friday August 18, 2023 @11:33AM
(#37177035)
What you don't like in the first option? If you need password reset feature, then it's necessary. If you don't need it, then remove it.
One counterpoint—if sessions last too long, then I forget the password, and reset the password. If sessions are too short, then I choose an insecure password. Neither option is great for security!
Talking about systems for which a password manager doesn’t make sense, like your lock screen password.