4 ms·
Perhaps they could take this to the logical conclusion and just require you to go through the Recover Password steps to access your web page. I know on every s
by iigs 18y ago
Perhaps they could take this to the logical conclusion and just require you to go through the Recover Password steps to access your web page.
I know on every site I have to do this with I end up forgetting the password (somehow they seem to be coupled with strange character count and type requirements), and I have to rescue my password anyway. Might as well just have a login page that says "enter your email address and click 'send' to log in" and then have it send the cookie to you you continue with.
Site security can not be stronger than the weakest attack vector. Now that the login vector is so difficult they might as well remove it and just use the "Change Password" vector as the only way in.
- bemmu 18y agoI know you were joking, but that's kind of an interesting idea, using e-mail as a login solution. To log in to Hacker News for example, you would type your e-mail address on HN and in response get an email with your session link in it. With a good enough e-mail reader it might not be as painful as it sounds, and it would eliminate passwords and there would be no difference between registering for a site and logging in to a site.
- cstejerean 18y agoIt would be annoying for some sites because sometimes email can take a while, but for things you don't use often this kind of solution would work well and don't mind waiting a bit to log in this could work well.