安全新兵营第五天：密码提问

InfoWorld Security Boot Camp: Day 5: Ask better password questions

 

September 25, 2009

 

YOUR ASSIGNMENT TODAY: Ask better password questions.

 

WHY DO IT: By asking better password reset questions, you'll keep passwords more secure.

 

HOW TO DO IT: If you want to be assured of the strength of your question, or at least give the user a fighting chance of staying secure, let them choose and input the security questions. A self-service password feature page should educate the user in how to create truly secure security questions. Suggest some good examples on that page.

 

RECOMMENDED READING: "Ask better password questions," Infoworld.com