https://bugzilla.wikimedia.org/show_bug.cgi?id=8460


Platonides <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED




--- Comment #3 from Platonides <[email protected]>  2009-02-13 12:39:03 UTC 
---
Security questions add yet another thing users need to fill and remember.
There're captchas and throttles in place now, so this shouldn't be a big
problem.

Also, you shouldn't need to login to disable those secondary passwords. The
second 
request disable the first provided secondary password. So there can be only two
valid 
passwords at a given time, with the secondary expiring after
$wgNewPasswordExpiry 
(by default, a week).

Those would-be crackers have a hard time to guess the generated passwords.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to