Re:Password Managers: Under the Hood of Secrets Management
by NikolaeVarius on Wednesday February 20, 2019 @08:43PM
(#19213832)
And then what happens when that has to change every 30 days?
[ Parent
| on HN ]
Re:Password Managers: Under the Hood of Secrets Management
by kaens on Wednesday February 20, 2019 @09:06PM
(#19213930)
for the example above, you could chunk-rotate, change the rot-degree you use as obfuscation or have other variants of your algorithm.
there's a point somewhere a bit faster than monthly-expiration where I would consider using a store and random gen in situations where i would otherwise not. really depends on you, what it's for, and what risks you need to care about the most.