The usability tag has no wiki summary.
15
votes
5answers
954 views
From a security standpoint should users be asked to confirm their password when registering?
Is it advisable to have users re-type their password to confirm it's correct? On User Experience the general consensus seems to be no but I'm wondering if this has security ramifications?
EDIT: my ...
3
votes
3answers
313 views
Unmasking passwords during sign up, is it a good idea?
I just read this article about unmasking passwords at sign up for usability reasons. On the surface it seems reasonable to me, but I'm wondering what additional security concerns that might generate, ...
3
votes
2answers
2k views
Security Alert - Office File Validation - how to decide whether to proceed?
Recently, when opening a Microsoft Word document that came from a trusted source, I received the following warning message:
The warning message is titled "Security Alert - Office File Validation". ...
4
votes
3answers
1k views
Is client side encryption really better than server side?
Web application may encrypt all user data at client side to convince users that it can't decrypt them.
When user enters password, it's used to encrypt data in browser and then it's sent to server in ...
