update

pilcrowonpaper · Jul 14, 2024 · 66d80c4 · 66d80c4
1 parent d5b30ba
commit 66d80c4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/posts/how-i-would-do-auth.md b/src/posts/how-i-would-do-auth.md
@@ -82,10 +82,10 @@ Again, I'm fine with telling the user if the email is valid or not.
 
 Login throttling and rate limiting would be pretty similar to login and will be based on both email and IP addresses. Add a Captcha if necessary.
 
-I think both single-use OTPs and links work and their expiration will be similar to email verification. I would hash the code or token just to be safe, especially since it's not really hard.
+Both single-use OTPs and links work and their expiration will be similar to email verification. I would hash the code or token just to be safe, especially since it's not really hard.
 
 2FA should be required even for password resets.
 
 ## Did I miss anything?
 
-Let me know on Twitter or Discord if there's anything I should add to the post.
+Let me know on Twitter or Discord if there's anything I should add to the post!