News for hackers. Stuff that matters.

A comment on Stop forcing arbitrary password rules. Parent comment

Re:Stop forcing arbitrary password rules by Natanael_L on Saturday October 24, 2015 @07:56AM (#10443320)
U2F! The new Yubikeys supports it, and there's other hardware you can get too that supports the protocol.
[ Parent | on HN ]
Re:Stop forcing arbitrary password rules by Asbostos on Saturday October 24, 2015 @08:51AM (#10443437)
Hey that looks fantastic. It only seems to be supported by about half a dozen sites though. I wonder if there are some big costs to a site adopting it.
[ Parent | on HN ]
Re:Stop forcing arbitrary password rules by Natanael_L on Saturday October 24, 2015 @09:28AM (#10443526)
The protocol is open, the libraries for implementing it are too. You just have to look into how it works and differ from what you have, and integrate it correctly into your auth system.
[ Parent | on HN ]