Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!us.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Arno Welzel Newsgroups: comp.lang.php Subject: Re: Most secure way to reset a password via email link Date: Wed, 19 Mar 2014 17:08:18 +0100 Lines: 35 Message-ID: <5329C0F2.5010607@arnowelzel.de> References: <8rdfh9trka40im8b9valvsrkg9png41a5r@4ax.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Trace: individual.net 9H3FyO6gIRQ4f0yIryAwbgsa9rLbTqNiwvdVCrw2Y5hZRC2hpF Cancel-Lock: sha1:F6glKW+e6yYEeAJ/QhjGh1Lq/Og= User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 In-Reply-To: Xref: csiph.com comp.lang.php:13218 Am 06.03.2014 01:58, schrieb The Natural Philosopher: > On 06/03/14 00:30, Geoff Muldoon wrote: >> tnp@invalid.invalid says... >>> >>> On 05/03/14 23:51, Richard Yates wrote: >>>> On Wed, 05 Mar 2014 14:26:21 -0700, Chuck Anderson >>>>> I think this kind of thing (and requirements on password strength) >>>>> create a security problem of their own by forcing people to record this >>>>> information somewhere and then keep it handy. >>>> >>>> Yes!!! The standard recommendations to users about passwords are >>>> simply contradictory or impossible to follow. Based on my brief >>>> experience dealing with others' passwords I believe that, with a few >>>> exceptions, everybody either writes them down or uses the same one in >>>> multiple places. >>>> >>>> Personally I confess that I do both. >>>> >>>> There's gotta be a better way. >>>> >>> have a file full of passwords and encrypt THAT with a secret key >> >> http://keepass.info/ >> > Assuming you are daft enough to run windows.. Keepass is open source and also available for many other platforms: -- Arno Welzel http://arnowelzel.de http://de-rec-fahrrad.de