Timeline for Is Django's approach to password reset tokens secure?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 22, 2017 at 1:03 | comment | added | Flash |
I disagree that escalation from "has a dump of your production DB with hashed passwords" to "reset any user's password and log in" is marginal (it appears the reference to settings.py has now been removed).
|
|
| Jul 1, 2015 at 7:57 | vote | accept | Angular noob | ||
| Jun 27, 2015 at 21:16 | history | answered | Rory McCune | CC BY-SA 3.0 |