Best idea, send a password over the Internet to verify it. (sarcasm) Even with g... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

AstralStorm on Dec 14, 2016 | parent | context | favorite | on: New NIST password guidelines: don't require charac...

Best idea, send a password over the Internet to verify it. (sarcasm)

Even with good TLS it is a stupid risk to take when you could verify locally. (Just the DoS potential not to mention compromise risk.)

jsjohnst on Dec 15, 2016 [–]

You do realize every time you login to a website you are "send[ing] a password over the internet to verify it" ;)

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact