Rate-limit magic-link emails per address #53

New Issue

2026-04-30T11:45:58+02:00

libretech commented

2026-04-30 11:45:58 +02:00

Currently no rate limit. Trivial to abuse for spam relay.

Tasks

Per-address sliding window (e.g. max 3 / hour).
Per-IP fallback.
Quiet failure response (no info disclosure).

Currently no rate limit. Trivial to abuse for spam relay. ## Tasks - Per-address sliding window (e.g. max 3 / hour). - Per-IP fallback. - Quiet failure response (no info disclosure).

libretech closed this issue

2026-05-03 09:12:37 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: public/librenotes#53