sudo@lemmy.fmhy.mltoLemmy Support@lemmy.ml•Is this a terrible idea - receiving e-mail to reset accounts?English
21·
1 year agoYes, it is very much a terrible idea. If you aren’t prepared to properly operate an instance, outside of making one for solely your own use, don’t.
Only if logging out actively invalidates session tokens, which appears to have not been the case. https://github.com/LemmyNet/lemmy/issues/3364