On: Expired links should be less common

[paulgb]

How does that stop script kids from messing with the GET arguments? You are still passing state in the URL, no?

[benreesman → paulgb]

i can make the encoding of the data arbitrarily secure at a cost of time/space. in the simplest case of base64, it is just security by obscurity which is why i only asserted that it keeps out juvenile delinquents. if you want it to be robust then you must use encryption of course.

[eru → benreesman]

Signatures.