Do you think this is a security risk and if not is it a bad UI decision?

[Reartes Guillermo]

>> what if the password IS 12 bullet characters :)

Three UI elements:

* two password fields that do not echo the password by default or covers it
with bullets or asterisks.
* one check-box that shows the password if the user wishes so.

It is the most flexible scheme. If one doubts the typed password and
re-typing it is not desirable or enough (if one suspects the keyboard)
having
a check-box that shows the password covers that usage case. And the user
will make sure when to enable the check-box (and when not to).

When one installs fedora, who is near to you when you install fedora, who
is looking at you when you install fedora and the size of the password one
will use for fedora, should not make uncomfortable the act of installing
fedora.
Ultimately, it is the responsibility of the user to not to get its password
'seen' (by any means), but i think the mentioned scheme is more convenient.

Cheers.




On Mon, May 6, 2013 at 9:41 AM, Przemek Klosowski <
przemek.klosowski at nist.gov> wrote:

> On 05/03/2013 04:08 PM, Reartes Guillermo wrote:
>
>> I think that the previous behaviour was better. (covering the password
>> with bullets).
>>
>
> what if the password IS 12 bullet characters :)
>
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.**org/mailman/listinfo/devel<https://admin.fedoraproject.org/mailman/listinfo/devel>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20130506/88458fb1/attachment.html>