User ID assignment should be non-incremental #2

Closed
opened 2025-10-24 19:43:27 -06:00 by blizzardfinnegan · 0 comments

Reasoning

In the current implementation, user ID of other users can be easily guessed, as can potentially the number of users on a given instance.

Recommendation

Generate user ID based on additional information; i.e. hash of date-time of user generation.

# Reasoning In the current implementation, user ID of other users can be easily guessed, as can potentially the number of users on a given instance. # Recommendation Generate user ID based on additional information; i.e. hash of date-time of user generation.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Menagerie/Lynx#2
No description provided.