4 ms·
IMHO, it is similar with security. Everyone wants better security, but everyone freaks out if their workflows change or some extra input steps are required for
by trymas 7y ago
IMHO, it is similar with security. Everyone wants better security, but everyone freaks out if their workflows change or some extra input steps are required for more sensitive actions.
- blfr 7y agoBecause many people implementing security measures sincerely believe that more hassle is better. They have a moral view of security: the more you're willing to put up with, the more secure you are. This is, of course, not true. Password managers are both convenient and improve security. U2F beats virtually every other second factor and YubiKeys are also more convenient than copying codes from texts. If you're changing the workflow anyway, make it both more secure, and more convenient. Sure, it's not always possible. But it very often is.