3 ms·
The encryption and process surrounding accessing passwords is meaningless. Who guards the encryption key, and how is this any better than storing passwords in t
by DavidSJ 17y ago
The encryption and process surrounding accessing passwords is meaningless. Who guards the encryption key, and how is this any better than storing passwords in the clear in some password-protected database?
The point is, the person with this key can view -- and possibly lose -- your password (which you may, but shouldn't, use in other places).
And once someone goes through this process, they can take it home with them.
The choice to do this, rather than to use an SSH key, is indefensible, and their explanation shows that they haven't got a clue.