build1 distinct publisher
Why keying login throttles on X-Forwarded-For lets attackers get a fresh bucket per request
Tessera counts login attempts against the TCP peer address instead, because that one cannot be forged, and it pays for the choice by handing a single bucket to every client behind the same reverse proxy.
Publishers:dev.to
Reality
- Evidence44
- Adoption
- Insufficient
- Hype gap−12
- Incentives62