What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 128 Stack Exchange communities.

Today, I subscribed to a filter for a tag (the every-15-minutes variant, it's a low-traffic tag). I was surprised about the activation link:

http://stackexchange.com/filters/email-confirm/5XXXX

When I subscribed to something else, I got this link:

http://stackexchange.com/filters/email-confirm/19XXXX

(each X is a decimal digit)

Are there just 500000 possible nonces or so? This probably does not have a big security impact, but still, why didn't you just use an 8-chars-hex string or so? This does not look like best practice to me. :D

share|improve this question
    
It's time to write a script... But seriously, does this really matter? Unless they use the same type of confirmation elsewhere, it probably just relates to a random numeric Id in the database for simpler code. –  Richard J. Ross III Apr 1 '13 at 19:11
    
@RichardJ.RossIII Maybe it doesn't really matter, but it kind of bugs me. Also, if they don't need to verify the identity, why do it? –  thejh Apr 1 '13 at 19:28
add comment

You must log in to answer this question.

Browse other questions tagged .