[Cryptography] Why don't we protect passwords properly?

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sun Dec 22 03:45:47 EST 2013


Bill Cox <waywardgeek at gmail.com> writes:

>Why is the current flawed system used?  I just don't understand it.

It's pretty simple really.  Everyone knows that passwords are no good, so
there's no point in trying to use/apply/implement them properly.  Instead, we
need to move everyone to PKI^H^H^Hbiometrics^H^H^HOpenID^H^H^H^Hsmart
cards^H^H^H^HOAuth^H^H^H^HPassport^H^H^H^HCardSpace^H^H^H... and then all our
problems will be solved.  Any minute now.

Peter.



More information about the cryptography mailing list