User Andrew Hoffman

25 votes

7 answers

6k views

At what length does a password stop making sense?

asked Dec 9, 2013 at 2:02

8 votes

4 answers

2k views

Is 'Bring your own Identity' as the only authentication option a valid practice?

asked Jun 25, 2014 at 13:58

5 votes

2 answers

269 views

Should password recommendations be different for devices, networks, and internet?

asked Jun 17, 2014 at 15:01

4 votes

1 answer

214 views

Would siloing passwords into their own locked down schema improve security?

asked Dec 18, 2013 at 16:12

2 votes

1 answer

274 views

Is asking for credentials from a separate trusted domain an acceptable practice?

asked Jul 1, 2014 at 20:15

2 votes

1 answer

226 views

Would it be possible to verify ownership of digital currency without a network connection to an authority server?

asked Nov 5, 2014 at 17:36

2 votes

2 answers

445 views

Is upgrading key-stretching algorithms and/or repetitions a thing?

asked Jun 19, 2014 at 14:46

1 vote

1 answer

205 views

When is it appropriate to challenge with a secret word?

asked Dec 17, 2013 at 14:57

0 votes

1 answer

361 views

Seeking help with implementing SCRAM in .NET

asked Dec 6, 2013 at 16:32

0 votes

1 answer

216 views

How are SCrypt's memory-hard requirements substituted with more CPU?

asked Nov 20, 2014 at 15:55

Stack Exchange Network

10 Questions

At what length does a password stop making sense?

Is 'Bring your own Identity' as the only authentication option a valid practice?

Should password recommendations be different for devices, networks, and internet?

Would siloing passwords into their own locked down schema improve security?

Is asking for credentials from a separate trusted domain an acceptable practice?

Would it be possible to verify ownership of digital currency without a network connection to an authority server?

Is upgrading key-stretching algorithms and/or repetitions a thing?

When is it appropriate to challenge with a secret word?

Seeking help with implementing SCRAM in .NET

How are SCrypt's memory-hard requirements substituted with more CPU?