Educause Security Discussion mailing list archives

Re: Password hints


From: Roger Safian <r-safian () NORTHWESTERN EDU>
Date: Mon, 15 Dec 2008 10:19:32 -0600

At 05:57 PM 12/12/2008, Brian Kaye put fingers to keyboard and wrote:
Why not allow them to create their own challenge question with some
appropriate scan of the question and answer?

FWIW, in our case, we wanted to create a system that the users
could use online.  If you allow users to create their own questions,
and you want a self remediation online access, then they need to
answer their question exactly the same.  It doesn't always work that
way, since people forget things like capitalization, etc.


--
Roger A. Safian
r-safian () northwestern edu (email) public key available on many key servers.
(847) 491-4058   (voice)
(847) 467-6500   (Fax) "You're never too old to have a great childhood!"

Current thread: