undefined | Better HN

0 pointscrtasm2y ago0 comments

A lot of account compromise is due to reused passwords so I'm not sure that's a complete solution.

0 comments

3 comments · 2 top-level

Kwpolska2y ago· 1 in thread

Sending a PGP-encrypted email with a verification link to activate the feature should solve that.

What are the disadvantages of only signing (and not encrypting the message body of) account reset emails?

The point is that much more sensitive things exist online and it's a solved problem

j / k navigate · click thread line to collapse