@jwildeboer@social.wildeboer.net
2026-10-17 14:22 UTC
@renchap@oisaur.com „forgotten” tokens however are *also* a risk that can be mitigated, in my opinion. In general I think they should have an expiry counter of 12 months that resets after every use. @stux@mstdn.social @gbargoud@masto.nyc
Replies (1)
-
@renchap@oisaur.com 2026-10-17 20:26
@jwildeboer@social.wildeboer.net @stux@mstdn.social @gbargoud@masto.nyc While true in theory, from what we have seen in this latest wave (at least in my knowledge) this is not the case here and it comes from “plain old” credential leaks and password reuse.