> Are all systems which depend on someone not guessing your strong password wrong? Are practically all encryption schemes wrong? No, but if your security syste

> Are all systems which depend on someone not guessing your strong password wrong? Are practically all encryption schemes wrong? No, but if your security system has a password and only one account shared by everyone where the password is shared as plain text (typically just emailed from person to person) without any sort of user access logging then it's got major problems. With just a URL you have no idea who has access and the only way of revoking access to anyone is to permanently move the resource and then get back in contact with everyone who should have access by sending the new "password" around. > Are practically all encryption schemes wrong? An encryption scheme that involves the users sharing the only password through far less secure channels?