We'd lose our security certificate if we allowed pasting

Re:We'd lose our security certificate if we allowed pasting by freditup on Tuesday May 06, 2014 @11:29AM (#7705047)

Is rate limiting by IP the best way to handle something like this (other than the obvious, allowing better passwords)? You could obviously rate limit by account, but then you make it easy for anyone to lock anyone else out of their account. And obviously rate limiting by cookies as mentioned is awful.

[ Parent | on HN ]

Re:We'd lose our security certificate if we allowed pasting by kevinburke on Tuesday May 06, 2014 @11:42AM (#7705116)

There's no great way to "handle" something like this besides modifying the protocol to be less vulnerable.

[ Parent | on HN ]