124887-authentication-why-7-day-save

== Content ==
			
Hi there,
 
This isn't a complaint, but I'm trying to guess why authentication for WS saves specifically for 7 days. Why not 14 days, or a month? Why not a year? :p
 
Cheers for any tech-savvy responders to esplain!	
----
			
because that would kind of defeat the purpose.
And correct me if i'm wrong but I assume hackers can copy your IP address.	
----
			
How would it defeat the purpose? If 7 days is OK, why isn't 14? What's the difference other than extending what seems to already be a very minute possibility of being hacked?
 
That's what I need to know!	
----
			7 days is a lockout in the game, its the time for reset most pof the important quest in game so it seems reasonable	
----
			7 days is a common high-security 'remember' practice in a lot of infrastructures.  If someone somehow swipes your account and spoofs the IP (or, say, your family plays your account when you're not home and you don't know about it) then after a max of 7 days they need to get the auth code again.  Google does this with a mobile authenticator, but the IP save is 30 days.  I actually like the 7 day reset, being a stickler for security.	
----
			
{| class="blockquote"
7 days is a common high-security 'remember' practice in a lot of infrastructures.  If someone somehow swipes your account and spoofs the IP (or, say, your family plays your account when you're not home and you don't know about it) then after a max of 7 days they need to get the auth code again.  Google does this with a mobile authenticator, but the IP save is 30 days.  I actually like the 7 day reset, being a stickler for security.
----
			
{| class="blockquote"
So it's a "best practice" decision rather than a hardware decision?
----
			
{| class="blockquote"
How would it defeat the purpose? If 7 days is OK, why isn't 14? What's the difference other than extending what seems to already be a very minute possibility of being hacked?
 
That's what I need to know!
----
			
{| class="blockquote"
Because you make the window bigger "something" can happen.
Carbine most likely decided this was the best trade off between security and convenience.
 
Don't know what you want to discuss really.
----
			Also thinking about the logs and such, it's much easier to look through a weekly log then a monthly log if something did happen.	
----
			
{| class="blockquote"
Pretty much this.  IP spoofing is pretty hard and has to be done on a per-account basis (for the most part; I suppose it's feasible someone could work at it hard and make something that could automatically sample your IP and middleman it, but that'd be quite a trick).  However, the wider the window gets, the easier it is to do.
 
In all honesty, I'd assume seven days is just the best compromise between making the system airtight and keeping people from complaining too much about having to key in as they were.  At least if you're gone for a week, your account locks up and someone hacking your account while you're idle or lapsed can't take you for a spin when you're least likely to notice for days on end.
----
			I'm just happy for the 7 days whatever the reason.  It was such a royal pain in the middle of raid when the game would crash or would need a relog to run and grab my phone.  At least this way I can quickly relog and jump back in.  	
----
			Because 6 days sounded to short, but 8 was an obvious overkill	
----
			9 was right out!	
----
			
{| class="blockquote"
I'm just happy for the 7 days whatever the reason.  It was such a royal pain in the middle of raid when the game would crash or would need a relog to run and grab my phone.  At least this way I can quickly relog and jump back in.  
----
			
{| class="blockquote"
Then as you go for your phone it dies just as you open up the app...lol
----