The only answer to this Security SE question does answer the question but doesn't add any relevant reference.
The person doesn't have a medal for the topic so I wasn't sure if we should accept the answer without any reference just for the sake of accuracy. I was wondering if this should be a general thing. I find it a good way to ensure that an inaccurate answer is not marked as accepted just because it aligns with the OP's thought process/requirement.