And we get back to the original point of the article (sort of). Opening a magic ...

		xx_ns 39 days ago \| parent \| context \| favorite \| on: Emailing a one-time code is worse than passwords And we get back to the original point of the article (sort of). Opening a magic link should authenticate the user who opened the magic link, not the attacker who made the application send the magic link.