Re: Authentication barrier

in our proposal to wcag we had processing as part of it and your example would have been included.

however it became very hard to define/test etc and got reduced. 



Add it to our use case page, and we can try and work with wcag as how we can included it



https://docs.google.com/document/d/174PnVZUaRx7lUnZI8_xl7aeN_6Lztv7aj9C_u7ArPpg/edit#



All the best



Lisa Seeman



http://il.linkedin.com/in/lisaseeman/, https://twitter.com/SeemanLisa








---- On Fri, 01 Feb 2019 13:35:53 +0200 Steve Lee <stevelee@w3.org> wrote ----




On 31/01/2019 17:22, Alastair Campbell wrote: 

> It's all relative, but asking people to remember strong passwords is actually worse (on average) than letting them write it down. 

 

I think that observation hints at the core problem - password based 

authentication is an attempt to get people to do something that is just 

unnatural. Case in point - social engineering so often just shortcuts it 

completely - ie just ask for a password or where it's kept. 

 

Password-less schemes seem hopeful but as they [currently] send you a 

message with a link in they on require you to have access to personal 

email or SMS capable device. Many older users have neither. 

 

Biometrics still require special hardware with the users trust. 

 

Steve