3 ms·
If one link of the chain is broken, it's game over. While this is a good effort, my point is that not considering the entire system as a whole simply transfers
by not_that_noob 9y ago
If one link of the chain is broken, it's game over. While this is a good effort, my point is that not considering the entire system as a whole simply transfers problems from one part of the domain to another.
- krupan 9y agoYou are right in a sense. Right now the problem is up to individuals to create secure passwords for each and every website they interact with. People that have no idea how computer security works. The problem now is also on individual website developers to be trusted with those passwords and keep them secure. This transfers the problem away from both of those groups. Individual no longer have to create multiple secure passwords and website developers no longer have to store those precious secrets. This is a huge improvement. You are correct that it's not perfect, but instead of security pros spending all their energy teaching people how to manage passwords, they can focus on the remaining problems that you point out.
- djrogers 9y ago> simply transfers problems from one part of the domain to another. No, it completely eliminates several huge vulnerability domains. Just because it doesn't solve a different one doesn't make it bad.