thentos
thentos copied to clipboard
Consider stateless tokens
http://spacebug.com/tableless_secure_one_time_password/
may be a substitute for
- pseudonyms (we don't have those yet)
- session tokens
- other things
using this as session tokens would also solve the problem that either the database state is bloated with lots of sessions, or sessions are lost during restart. it's not clear whether either of these two is a problem, but it's good to keep a possible solution in mind.
related: #244, #245, probably others.