This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Talk:Choosing and Using Security Questions Cheat Sheet
From OWASP
Revision as of 13:47, 8 July 2018 by Douglasheld (talk | contribs) (→Security questions: dubious value: new section)
The "Choosing and Using" part of the title read quite awkwardly the first couple times i saw this link. Consider renaming this cheat sheet to just "Security Questions Cheat Sheet". Gabe Friedmann 17:24, 15 October 2012 (UTC)
Security questions: dubious value
Security Questions should go the way of the dodo. What is the point of subverting a strong password with more easily guessed security questions? If SQ were stronger, they would form a better primary login factor. But, they are not.