3 ms·
I agree in spirit but not in practice. I don't think a website should be trusted to generate a random password - leave that to browser infrastructure (which inc
by lucasyvas 3y ago
I agree in spirit but not in practice. I don't think a website should be trusted to generate a random password - leave that to browser infrastructure (which includes extensions).
- Wowfunhappy 3y agoThe idea is that by generating a unique password for the user, the website guarantees that it really is a unique password. How else can you do that? How is this different from the way we handle e.g. api keys?