

How is someone meant to guess what seems to be a randomly generated id? If they try to brute force it then you could probably set up something like fail2ban to block them after a few failed attempts.
I’m not saying video ids shouldn’t require authentication, they should but the risk of someone getting the video id seems fairly low.





Correct me if I’m wrong but fax isn’t end to end encrypted so how is it deemed more secure than email which also isn’t end to end encrypted (by default).