3 ms·
I guess it couldn't be worse than no key, even if most people's passwords are terrible and poorly handled. But presumably the credit agencies would need the ke
by breischl 9y ago
I guess it couldn't be worse than no key, even if most people's passwords are terrible and poorly handled.
But presumably the credit agencies would need the key as well, to enable those resets and so they can add to the records, which probably negates much of the benefit.
- tylersmith 9y agoThere should be (authenticated) differentiations between what the credit agency does, what you do, and what third parties do.
- breischl 9y agoOne could have a signed audit log, and that's fine. But no matter what you do the CRA has to be able to write to the data, and read from it to give it to third parties, and be able to reset passwords. AFAIK that requires that they have the keys to decrypt the data.