4
votes
4answers
162 views

Security issues if not forcing a user to sign up

I've built a simple web app Flask.io that enables users to create and share to-do lists. It doesn't require sign up. This is an important differentiator. I don't want to force the user to register ...
0
votes
1answer
80 views

Any good examples of a user signing up for a Browser Certificate / Client Certificate?

A client certificate is something that is used with TLS/SSL to increase security of the HTTPS session. There are two parts to this The user needs to create the certificate, have it approved (which ...
5
votes
5answers
786 views

Forgotten Passwords - is there a real benefit to asking for memorable password hints on signup?

On several signup forms I see fields such as "Choose your Memorable Password Question". Is this actually benifical nowadays? Surely a more secure method if someone forgets their password is to build a ...