我应该将用户ID公开吗? [英] Should I expose a user ID to public?
问题描述
我有一个表单,向公众显示用户ID。我想知道这是危险的。就我个人而言,我看不到什么坏的。
I have a form that reveals user IDs to public. I was wondering that is this dangerous. Personally I do not see anything bad about it. The ID is just used to reference a single database record.
推荐答案
如果这是危险的,Stack Overflow不会显示用户ID,以便使用户个人资料查找工作: http://stackoverflow.com/users/104826/rfactor
If it were dangerous, Stack Overflow wouldn't be displaying user IDs in their URLs in order to make user profile lookups work: http://stackoverflow.com/users/104826/rfactor
编辑巨大级别的严重性:如果用户ID本身是敏感数据;例如您的主键由于某些原因恰好是社会安全号码,这肯定是一个安全和隐私责任。如果您的用户ID只是自动递增的数字,您很清楚。
Edit of seriousness of immense levels: if user IDs are themselves sensitive data; for example your primary keys for some reason happen to be social security numbers, that'll definitely be a security and privacy liability. If your user IDs are just auto-increment numbers though, you're clear.
这篇关于我应该将用户ID公开吗?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!