Timeline for How genuine are password entropy calculations?
Current License: CC BY-SA 3.0
4 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 17, 2017 at 13:14 | history | edited | CommunityBot |
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
|
|
Feb 21, 2013 at 1:32 | comment | added | Peleus | Excellent response and I think it addresses what I was getting at. To rephrase my question with my new understanding it was along the lines of "Why do discussions surrounding password entropy seemingly ignore the likelihood of the password generation process being selected?" My answer would now probably be we can only evaluate the knowns in the equation, and that's the password generation processes itself. The selection of that generation process adds its own entropy but as with most security we just base it off the assumption they know and evaluate the strength of the remaining section. | |
Feb 21, 2013 at 1:29 | vote | accept | Peleus | ||
Feb 20, 2013 at 14:21 | history | answered | Thomas Pornin | CC BY-SA 3.0 |