full-disclosure - Re: OpenID. The future of authentication on the web?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 23 Mar 2008 20:04:41 -0400
From: "Larry Seltzer" <Larry@...ryseltzer.com>
To: "Paul Schmehl" <pauls@...allas.edu>, <full-disclosure@...ts.grok.org.uk>
Subject: Re: OpenID. The future of authentication on the
	web?

>>I understand the attractiveness of not having to remember lots of IDs
and passwords, but when you give up control of your data, you give up
control of your future.

Normal people aren't going to remember enough passwords, let alone
strong passwords, to make that control meaningful. I do get your point,
but I bet that the best alternative is to give them one set of
credentials and make it as strong as possible.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.pcmag.com/securitywatch/
Contributing Editor, PC Magazine
larry.seltzer@...fdavisenterprise.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/