DoS resiliency approach section of the Application Security spec should be updated in relation to Token concept

[evilaliv3]

DoS resiliency approach section of the Application Security spec should be updated in relation to Token concept; this should be done in relation to all D8 implementations and in particular to the concept specified in https://github.com/globaleaks/GlobaLeaks/issues/934

Application Security: https://docs.globaleaks.org/en/main/security/ApplicationSecurity.html

[vecna]

Isn't better do a small research on the effectiveness of the system, before update the app sec doc ?

[evilaliv3]

ok, anyway one day we will have to do this :) let's keep the ticket open.

[fpietrosanti]

@evilaliv3 @vecna I would avoid to include any code into globaleaks without including the proper documentation in the specification documents. Please do not include in any globaleaks release any code without updating the specifications, it shall be part of a release process. No specification, no release must be the right approach