
|
Are passwords obsolete? Basic rules: If it is generated by the user, it can certainly be cracked If it can be remembered by the user, it can probably be cracked Exception: If the password is exchanged over a protected connection (SSL, TLS, IPSEC) If the challenge/response mechanism is designed to resist dictionary attacks |