News for hackers. Stuff that matters.

A comment on Adding Easy SSL Client Authentication To Any Webapp. Parent comment

Re:Adding Easy SSL Client Authentication To Any Webapp by asdfaoeu on Saturday November 30, 2013 @07:53PM (#6825498)
It's because it actually has enough entropy to be completely improbable guessing.
[ Parent | on HN ]
Re:Adding Easy SSL Client Authentication To Any Webapp by michaelmior on Saturday November 30, 2013 @08:53PM (#6825671)
Some users (of course a tiny minority) generate random passwords. I think the point holds, I just think the presentation isn't completely accurate.
[ Parent | on HN ]
Re:Adding Easy SSL Client Authentication To Any Webapp by joesb on Sunday December 01, 2013 @04:46AM (#6826730)
> They can be guessed – Regardless of complexity requirements, users will find and use the simplest pattern allowed, and attackers routinely take advantage.

It's right in the article that they are talking about average user behavior of choosing guessable password, even if you tell them not to.

[ Parent | on HN ]