PKI too confusing to prevent phishing, part 28

[Steven M. Bellovin]

In message <Pine.SOL.4.61.0509252240470.22831 at frame>, Jerrold Leichter writes:
>
>
>Talking about users as being able only to hold one bit continues an 
>unfortunate attitude that, if only users weren't so dumb/careless/whatever, we
>wouldn't have all these security problems.

This is an important point.  When *many* people are doing the "wrong" 
thing, the problem isn't the people, it's the mechanism they're being 
asked to use.

		--Steven M. Bellovin, http://www.cs.columbia.edu/~smb



---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com