Commit Graph

2 Commits

Author SHA1 Message Date
Bryan Frimin
26f4ba7e89 Rewrite SECURITY_NOTES password-change entry
Previous entry leaned on filler ("close the door behind it", "what
people expect") and gave only a vague behavioural summary. Replace
it with the actual mechanism: which table is touched, the transaction
boundary, the asymmetry between change (preserves caller) and reset
(revokes all), and why the session middleware needs no change.

Also drop the em dash in the metadata line.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-05-05 11:56:20 +02:00
Sacha Al Himdani
0a5d8a0642 Add security notes with safer password changes entry
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-05-05 11:45:47 +02:00