Frequent reauth doesn't make you more secure

Re:Frequent reauth doesn't make you more secure by Uvix on Thursday June 12, 2025 @11:13PM (#44265416)

Don't you generally have to enter the current password to change it to a new one?

[ Parent | on HN ]

Re:Frequent reauth doesn't make you more secure by TZubiri on Friday June 13, 2025 @03:02AM (#44266332)

Interesting. I guess you could do it on the frontend by asking for old and new passwords simultaneously and sending the hashes to the backend.

That said, it means that you can skip this check by hacking around the front end check haha

[ Parent | on HN ]