Re:Password Rules Are Bullshit
by x1798DE on Friday March 10, 2017 @09:55AM
(#13839000)
If a site offers email resets at all, how often you (legitimately) use them generally doesn't play into the security analysis. If it's easier to get access to your e-mail than to get the password to the account that can be reset by proving access to the e-mail, then your e-mail is the weakest link.
[ Parent
| on HN ]
>"if it's easier to get access to your e-mail than to get the password to the account that can be reset by proving access to the e-mail, then your e-mail is the weakest link."
This was exactly my point yes :)