Just my little example (pls, correct me if I'm wrong)

36 to the 6th = 2,176,782,336 record locators

10 - get requests per second
50,000,000 - NWA passenger per year (I do not know the exact number, so I guessed)
365 - days in year
136,986 - passengers per day

I assume that each day we can use all 2,176,782,336 record locators.

2,176,782,336 record locators / 136,986 passengers per day = 15,891 record locators one needs to check to find a real one supposing the record locators are evenly spread.

So, on average one needs to investigate 15,891 to find a real one. It can be done in 1,589 seconds at a rate of 10 get requests per second, that is only 26 minutes.

I have to side with keithguy primarily because I think that it does not take much to make the system stronger security-wise. I already dropped an email to NWA web site folks.

------------------
Jano
Home of NWA info page

[This message has been edited by Jano (edited Mar 04, 2004).]