2 ms·

Bruce Schneier has written extensively on the subject (and has written a password manager so he knows what he's talking about): https://www.schneier.com/blog/a

• mcint 5y ago
  He's a great security expert. nit - I wouldn't claim that someone who _has_ written security (password, or cryptography)-related software, is necessarily _qualified_ to, or a trustworthy _expert_ in the field. In security especially, self-proclaimed expertise (as the strongest sales pitch) does not distinguish between respected experts and snake oil salesman. I would say that he's written several widely read and respected cryptography books, designed widely used algorithms (standards & well-tested candidates), and write about social & technical factors that surround & affect security. Good links! Thank you!