5 ms·
All depends on the threat model. Reusing username/email/password can cost your users hundreds per day on a gambling site. And users don't care about a password
by always_good 9y ago
All depends on the threat model.
Reusing username/email/password can cost your users hundreds per day on a gambling site. And users don't care about a password-gen guide. For example, in that case, you'd want to consider just generating passwords for them.
But of course this would be silly for the run of the mill website.
- chatmasta 9y agoThat’s funny because coral.co.uk posts its login over HTTP. In fact if you try to login via https it redirects you to http. It would be fun to setup a hotspot called _The_Cloud outside a Coral and see what you find on the wire!