On: Passwords in plain text

[oakwhiz]

I wish websites would actually use client certificate authentication instead of having to play hot potato with secret passwords.

[ddebernardy → oakwhiz]

This a thousand times. And ssh keys for servers.

But then, how would you log into e.g. gmail from a cybercoffee in a foreign country? (Assuming you dare do so in spite of the risk of key loggers.)

[scott_karana → ddebernardy]

> But then, how would you log into e.g. gmail from a cybercoffee in a foreign country? (Assuming you dare do so in spite of the risk of key loggers.)

This still applies with any other authentication schemes...