> Public keys really are the better way to handle user auth, less of a minefield for regular users.
I'll go along with that, thou i consider a secret that resides in my brain vastly more secure than one residing on my disk.
I'll go along with that, thou i consider a secret that resides in my brain vastly more secure than one residing on my disk.
With passwords you are sending it to remote computers where it could be compromised. Thus the standard practice of forcing all users to change their passwords when a server is compromised.
...so, this isn't great advice either. Password vaults are important..... at which point, you can just use a complex unique password.