serras/SparkleShare — comment on commit 28e55623ea13f0438447d41103f644664d01b644
File:  line 0
By serras:

My idea is to generate random URLs for posting keys which would only last like 2 minutes exposed in HTTP. I don't think in that time an attacker could have time to make an attack, without knowing that an invitation is going to be generated. Using SSL also limits that only servers with a domain would be able to serve invitations.