How an application is kept secure to prevent unauthorized access.
14
votes
8answers
2k views
How to tell the user his login credentials are incorrect?
When a user has entered incorrect details into a login form, is it better to tell them:
The username or password you have entered is invalid.
or
The user name you have entered is invalid (for ...
8
votes
4answers
380 views
Does SSL on a company's website make the company appear more credible?
I recently had a thought about the way many modern browsers display information about a site's security certificates. At least Firefox shows a very noticeable blue box in the address bar on sites that ...
5
votes
2answers
164 views
Password and in place editing
I decided to support in place editing for a simple user table.
I am not sure what i should do about password...
When i create a new user i can have a textbox to type...
When viewing i can hide then ...
0
votes
3answers
225 views
Should a web browser indicate “year” near the lock icon to encourage more safe/secure website?
There are many important technologies coming to web browsers in the next few years. Not to mention that where we are today is a culmination of lessons learned and several security pitfalls.
However, ...
3
votes
2answers
191 views
How to handle creating new account with email address that is unverified on another account?
We have email address verification on our accounts. Users have to verify their email addresses when they create their accounts and when they update their email addresses on existing accounts. With new ...
4
votes
3answers
369 views
Use UAC Shield icon to indicate (non-Windows) elevation will be required?
i am working on financial software where there are many times where a "supervisor" is required to authorize that the user can continue, e.g.:
user wants to void a funds transfer
user has a variance ...
7
votes
3answers
380 views
Has Captcha become common knowledge?
I am doing a business site for a web company, and was wondering if Captcha has become so well-known, that it no longer needs an explanation ?
Right now there is only a input box, the captcha image ...
2
votes
5answers
420 views
Limiting customer credit cards to a single account
Is it a good idea to limit a customer's credit card so that it can only be used on one user account? The user can have as many credit cards associated with their account as they like, but they cannot ...
9
votes
4answers
648 views
Login button - on homepage or separate page?
I ran across an article called Put the login on the front page, where the author wants sites to:
[...]put the user name and password
box somewhere obvious on the home page
like the upper right ...
6
votes
3answers
433 views
Usability and security for user access and password handling in a web application?
I'm looking at putting together a website aimed at ordinary users that will handle personal data which I don't want to be compromised. How can I make the site secure but also usable?
It seems most ...
6
votes
3answers
50 views
Accessing secure content
Which of the permutations for accessing secure content do folks prefer? In this instance I'm referring to a saved quote and have usernames, email addresses and quote reference numbers available.
...
