All,
Please be advised, all the current ways of obtaining the APRS codes
function in a less secure manner than this.
Also, I have a different opinion of HTTPS/SSL use on Ham Radio (I'm of
the opinion it is permitted), that can be discussed in another forum/topic.
As other stations noted, someone can simply impersonate a station and
obtain the registration code, at least here, that someone must be on
AMPR to access the service. Next, I do not intend to provide the access
code, meaning only those on AMPR could generate "recovery codes." I
simply added the access code feature in case I was not at my station
when I needed the service (and since it was my first PHP script, to
simply see if I still had my "programming touch" from the C++ days).
Lastly, the software that I based the application on is public and could
be installed and ran by anyone with a Linux machine.
I considered that BEFORE I wrote the application.
-KB3VWG