@tdemin
emailConfirmationToken = base64(base64("%llu%llu" % (user.id, user.creationTimeMs))) # they'll never guess that it's double base64, and even if they do, they'll never guess the millisecond-precision timestamp from the database

Sign in to participate in the conversation
mstdn.jp

Mastodon日本鯖です.