Boost @Sempf@infosec.exchange: This is becoming core to the attacks section of my identity talks. Did you know that OWASP has a well vett…
This is becoming core to the attacks section of my identity talks. Did you know that OWASP has a well vetted password change flow, and more on recovery? They do. Use them.
https://stateofsecurity.com/account-recovery-is-becoming-the-new-identity-attack-surface/