Hacker News new | past | comments | ask | show | jobs | submit login

IANASE[1], but this seems a lot less secure than letting them keep track of your credentials. It seems like an open invitation for man-in-the-middle and phishing attacks. Training your users to (thoughtlessly) enter their credentials over and over seems like a really bad idea.

[1] I Am Not a Security Expert




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: