Signup Sessions: Verification, Refresh, and Revocation Boundaries (Why One)

Media sites have a narrow security problem at signup: a captcha can slow bots, but the session...