Comment Comment by homakov >(i.e no password reset by the attacker)Login link = reset link. it's not different from classic scheme. Equally insecure."What if" doesn't work, it's 2015 and the problem is still huge. "Use password manager" doesn't work anymore, unless you offer something dead simple as my idea. parent homakov 11 years ago
Login link = reset link. it's not different from classic scheme. Equally insecure.
"What if" doesn't work, it's 2015 and the problem is still huge. "Use password manager" doesn't work anymore, unless you offer something dead simple as my idea.