The purpose for this status code is in case someone is looking over your shoulder in the same physical location. That's why it's fine to be an LSD (least significant digit / optional) code, it's a snazzy feature that's nice to have but not mandatory. I think it's a good feature. It doesn't send it unencrypted (i.e. same as any other request) so it's not security theatre. It's there so people in the same location don't see your password.
---
Previous in thread (10 of 39): 🗣️ (nothien (a) uber.space)
Next in thread (12 of 39): 🗣️ PJ vM (pjvm742 (a) disroot.org)