Click here to Skip to main content
14,538,503 members

Welcome to the Lounge

   

For discussing anything related to a software developer's life but is not for programming questions. Got a programming question?

The Lounge is rated Safe For Work. If you're about to post something inappropriate for a shared office environment, then don't post it. No ads, no abuse, and no programming questions. Trolling, (political, climate, religious or whatever) will result in your account being removed.
 
GeneralRe: Password restrictions Pin
OriginalGriff12-Dec-19 2:32
mveOriginalGriff12-Dec-19 2:32 
GeneralRe: Password restrictions Pin
musefan12-Dec-19 3:43
Membermusefan12-Dec-19 3:43 
GeneralRe: Password restrictions Pin
phil.o12-Dec-19 2:36
mvephil.o12-Dec-19 2:36 
GeneralRe: Password restrictions Pin
Cp-Coder12-Dec-19 2:37
MemberCp-Coder12-Dec-19 2:37 
GeneralRe: Password restrictions Pin
dbrenth12-Dec-19 4:36
Memberdbrenth12-Dec-19 4:36 
GeneralRe: Password restrictions Pin
Cp-Coder12-Dec-19 4:40
MemberCp-Coder12-Dec-19 4:40 
GeneralRe: Password restrictions Pin
den2k8812-Dec-19 3:12
professionalden2k8812-Dec-19 3:12 
GeneralRe: Password restrictions Pin
Member 798912213-Dec-19 6:49
MemberMember 798912213-Dec-19 6:49 
I prefer the Kerberos strategy: You send no password at all across the network. You send a request for a "ticket", a proof that you are entitled to use a specific service. This request need not be encrypted at all (well, maybe if you want to keep it a secret that you make use of that service, but in any case, a MITM will see which IP address you go to).

In return you get a ticket that is encrypted with your password. You decrypt it locally, at your own PC, and enclose it with your requests to the service.

Part of the ticket is encrypted with the password of the service, so you can't fix it up to give you any rights that you are not entitled to. The ticket is valid for a limited period (like 8 hours), so if anyone steals it, they can't use it the next day. The ticket may contain your IP address, so that service requests from an intruder on a different IP address are rejected. It may contain a one-time encryption key that you can use for the session with the service; the service will find the corresponding key in the part encrypted with the service's key.

I think the Kerberos strategy is so great that I cannot understand why it hasn't been universally adopted. It certainly is not because we have something that is a lot better. It seems like web service developers simply do not know about it, which is a pity.
GeneralRe: Password restrictions Pin
DRHuff12-Dec-19 5:31
MemberDRHuff12-Dec-19 5:31 
GeneralRe: Password restrictions Pin
honey the codewitch12-Dec-19 6:35
mvahoney the codewitch12-Dec-19 6:35 
GeneralPassword restrictions - aarrrggghhhh Pin
bVagadishnu12-Dec-19 7:17
MemberbVagadishnu12-Dec-19 7:17 
GeneralRe: Password restrictions Pin
DumpsterJuice13-Dec-19 8:54
MemberDumpsterJuice13-Dec-19 8:54 
GeneralRe: Password restrictions Pin
abh55513-Dec-19 19:43
professionalabh55513-Dec-19 19:43 
GeneralRe: Password restrictions Pin
Gluups13-Dec-19 19:43
MemberGluups13-Dec-19 19:43 
GeneralRe: Password restrictions Pin
Kirk 1038982113-Dec-19 14:16
MemberKirk 1038982113-Dec-19 14:16 
GeneralRe: Password restrictions Pin
Brady Kelly31-Dec-19 5:45
MemberBrady Kelly31-Dec-19 5:45 
GeneralCCC OTD Pin
Duncan Edwards Jones11-Dec-19 23:29
professionalDuncan Edwards Jones11-Dec-19 23:29 
GeneralRe: CCC OTD Pin
OriginalGriff11-Dec-19 23:32
mveOriginalGriff11-Dec-19 23:32 
GeneralRe: CCC OTD Pin
digimanus11-Dec-19 23:36
Memberdigimanus11-Dec-19 23:36 
GeneralRe: CCC OTD Pin
OriginalGriff11-Dec-19 23:38
mveOriginalGriff11-Dec-19 23:38 
GeneralRe: CCC OTD Pin
OriginalGriff11-Dec-19 23:38
mveOriginalGriff11-Dec-19 23:38 
GeneralRe: CCC OTD Pin
musefan11-Dec-19 23:59
Membermusefan11-Dec-19 23:59 
GeneralRe: CCC OTD Pin
OriginalGriff12-Dec-19 0:05
mveOriginalGriff12-Dec-19 0:05 
GeneralRe: CCC OTD Pin
lw@zi 12-Dec-19 0:09
professional lw@zi 12-Dec-19 0:09 
GeneralRe: CCC OTD Pin
OriginalGriff12-Dec-19 0:24
mveOriginalGriff12-Dec-19 0:24 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.