Some (bad) examples(2)

• Registration application:

  • sends a temporary URL by email
  • temporary URL gives you a certificate

• Problems:

  • temporary URL could be guessed: http://site/path/<lastname><date +%s>.html
  • deleting the temporary URL after use