Hacker News new | past | comments | ask | show | jobs | submit login

So as for question 3... one password? So anyone who has access could log in as anyone else who has access using their email and the same password, right? Also, do they need the password when clicking from an email or is there a special link there that lets them bypass password entry? If the latter, how long do those links last?

I don't mean to pry too much into implementation details, but I am very selective about what I share, so it's important to me.




Yup, one password that they need to use to login, along with the email address that you've whitelisted for them. So its possible that someone could guess the password and their email address to get unauthorized access. I've debated a lot on this one and from the many parents I spoke to, this seemed to be a good middle ground between having some security and keeping it simple for family members to use.

The links in the emails have a special link that unique to each subscribers. These links at the moment do not expire but thats something I'm changing soon. All the images in the emails expire after a week.

I wrote a blog post on how I handle security on the app: http://blog.getbabydigest.com/post/88405261016/privacy-and-s...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: