canmove, Confirmed users
1,537
edits
Privacy/Reviews/BrowserID.org: Difference between revisions
→User Enumeration
| Line 354: | Line 354: | ||
''Recommendation:'' Rate Limit requests to the API so that a malicious user can't quickly brute-force check for which email addresses are enrolled. | ''Recommendation:'' Rate Limit requests to the API so that a malicious user can't quickly brute-force check for which email addresses are enrolled. | ||
{{ResolutionBox|{{ | {{ResolutionBox|{{risk|}}}} | ||
= Alignment with Privacy Operating Principles = | = Alignment with Privacy Operating Principles = | ||