Reply To: OCU C)SP D Week 02 Lesson 04 Discussion
Carlos,
Great summary of broken authentication and session management, you hit the key fixes (MFA, hashing/salting, timeouts, and not exposing secrets in URLs). I agree that if auth fails, everything else can crumble.
Quick question: if a team has limited time and budget, which single control would you roll out first for the biggest impact, and why?
