On 21/12/17 22:16, Curt wrote: > On 2017-12-20, Richard Hector <richard@walnut.gen.nz> wrote: >> >> On 21/12/17 02:02, Curt wrote: >>> Also, I'm uncertain whether suppression of the asterisk-echo qualifies >>> as "security by obscurity" >> >> I think most people accept that obscurity is quite reasonable for >> passwords ... >> >> Richard >> > > Wonderful, Dick, however, I was referring to the specific expression > "security by (or through) obscurity," which denotes something else. > > https://en.wikipedia.org/wiki/Security_through_obscurity I'm aware of that concept. But making it harder to see the length of the password makes it harder to guess the password, no? Which has got to be good? On 21/12/17 23:57, Curt wrote: >>> Also, I'm uncertain whether suppression of the asterisk-echo qualifies >>> as "security by obscurity [...] >> I'm certain. It doesn't. > Here too. And you seem to agree. Richard ((almost) always Richard, and never Dick)
Attachment:
signature.asc
Description: OpenPGP digital signature