How are the login forms protected? (Lecture 3)

Question

Hello,

Are login forms also protected with CSRF tokens, or is some other mechanism typically used?

Thanks in advance!

Answer 1

Yes, they should typically be protected via CSRF tokens.

Against brute-force attacks on the login form, there are typically rate-limits and/or captchas.