|
|
|
|
|
|
by karrotwaltz
2563 days ago
|
|
|
Reminded me of NIST's digital policy guidelines (from 2017, so quite a while after this page was published): > In order to assist the claimant in successfully entering a memorized secret, the verifier SHOULD offer an option to display the secret — rather than a series of dots or asterisks — until it is entered. This allows the claimant to verify their entry if they are in a location where their screen is unlikely to be observed. https://pages.nist.gov/800-63-3/sp800-63b.html |
|
|