Hacker News new | past | comments | ask | show | jobs | submit login

That wouldn’t be idempotent.

Also, you couldn’t send such a secret to, say, Gmail.




It would be in that repeatedly hitting the URL will not have any effects, other than disabling them the first time.

But yeah, auto-link followers will invalidate them immediately. There's a case to be made for that being a good thing, but don't want to get into that.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: