At 4/12/2010 09:56 AM, Philip TAYLOR wrote:
>Shouldn't input type=text be input type=password ?
>Otherwise the user's password will remain visible on-screen.


FYI I was interested recently to read some push-back against the 
age-old assumption that password input should be obfuscated:

Jakob Nielsen's Alertbox, June 23, 2009:
Stop Password Masking

Summary:
     Usability suffers when users type in passwords and the only 
feedback they get is a row of bullets. Typically, masking passwords 
doesn't even increase security, but it does cost you business due to 
login failures.
http://www.useit.com/alertbox/passwords.html

[I think this part of the discussion properly belongs over on WSG or 
Webdesign-L...]

Regards,

Paul
__________________________

Paul Novitski
Juniper Webcraft Ltd.
http://juniperwebcraft.com 

______________________________________________________________________
css-discuss [[email protected]]
http://www.css-discuss.org/mailman/listinfo/css-d
List wiki/FAQ -- http://css-discuss.incutio.com/
List policies -- http://css-discuss.org/policies.html
Supported by evolt.org -- http://www.evolt.org/help_support_evolt/

Reply via email to