7 ms·
> My (probably unpopular) opinion is that passwords should be randomly generated by the service, and not possible to change to a user-selected value. I would r
by u801e 9y ago
> My (probably unpopular) opinion is that passwords should be randomly generated by the service, and not possible to change to a user-selected value.
I would rather have a client side TLS certificate that's generated by the website I'm trying to log into when I create an account with them. You could still keep the username and password application level log in in addition to the certificate to get a second authentication factor.
- ryan-c 9y agoDid you ever use StartSSL? They did TLS client auth and it was surprisingly terrible.
- u801e 9y agoI never had the opportunity and, according to their website, they closed last month. Since I can't try it out myself, what was so bad about it?
- commandlinefan 9y agoTLS implementations themselves need to get a LOT better about describing error conditions before client certs will ever be a viable option for actual user authentication.
- u801e 9y agoCould that be something that a web browser or other client could translate to a more user friendly message?