Building a secure password reset

Yes, but only because this original item got flagged for some unknown reason(s) and so I re-submitted it to find out why (unsuccessfully) and to bring the article to HN's attention.

I'd ask that you read the comments on the submission you reference. In particular read this:

http://news.ycombinator.com/item?id=4280460

If you flagged this item, I would ask that you unflag it, as it was the original.

Thanks.