What is the purpose of using quote_id_mask Table ?
Best Answer
You can see the history for this implementation here. Likely, its done to prevent sequential ID attacks. (Bots have a harder time collecting quote data en masse now because the masks are not as predictable as IDs.)
The public_hash is used to reference the card from untrusted sources (like on checkout). It gives each card a unique non-sequential identifier that can't be readily guessed, to help curb any possible abuse.
Best Answer
You can see the history for this implementation here. Likely, its done to prevent sequential ID attacks. (Bots have a harder time collecting quote data en masse now because the masks are not as predictable as IDs.)