Thursday, August 28, 2008

‘Forgot your password?’ may be weakest link

I never really liked how the "I forgot my password" links work on various sites. Just sending a password in clear text in email is a bad idea (it travels across the internet, unencrypted for anyone to intercept. I also never like the questions the site let you choose from. Your favorite pets name, your high school, etc. Now it seems Now it seems that Facebook is making these questions obsolete and insecure.

No comments: