claudio 7de9ee2a7c Default to 8-char slugs for public-internet-safe entropy ...

5-char slugs over a 32-char alphabet are ~25 bits; brute-forceable at
HTTP speeds once the endpoint is public. 8 chars = 40 bits (~10^12
combinations), infeasible to scan within useful timescales. Existing
5-char slugs still resolve; only new artifacts use the longer form.

2026-04-22 23:18:36 +02:00

4.3 KiB

Raw Permalink Blame History

View Raw