j4v1ng / poligraph

A happiness monitoring tool for development teams.
0 stars 0 forks source link

Improve security for the application #2

Open TheImplementer opened 10 years ago

TheImplementer commented 10 years ago

Right now we're using the email of a user to register a vote. This can lead to problems from the user's point of view, since he might not want to be identified. A solution might be to generate a token for each email and use the token to validate the vote.

j4v1ng commented 10 years ago

I agree. Could be done. This way the user when hovers over the link in the email, does not see that the link will contain his email.