WebApp Sec mailing list archives

Re: User ID generation


From: Adam K <adamk1 () gmail com>
Date: Thu, 14 Apr 2005 15:55:42 -0500

I would say that would be a bad idea as it starts to give away
information about your users.  It is better to keep the userid a
unique value - at least that's my thought.

later,
Adam

On 4/14/05, Andi McLean <andi_mclean () ntlworld com> wrote:
Whilst talking about usernames, I was wondering what people's thoughts were on
the following scheme.

The users date of birth, Selected from drop down boxes, and entering a 4 digit
random number, selected by the system, so username are unique.

Cheers
Andi





Current thread: