Change Password - Revision history

Tom: /* Context */

2020-10-06T19:06:14Z

‎Context

2020-10-06T19:02:49Z

‎Well-known URIs

2020-10-06T19:00:55Z

‎Well-known URIs

2020-10-06T18:59:40Z

‎Solutions

2020-10-06T03:58:58Z

‎Change to Browser

2020-10-06T03:38:09Z

‎Solutions

2020-10-06T03:31:22Z

‎Solutions

2020-10-06T03:30:09Z

2020-10-06T03:27:03Z

2020-10-06T03:24:39Z

@@ Line 2: / Line 2: @@
 Whenever a security event is discovered the immediate call to a user is to [[Change Password]].
 ==Context==
-Users have been inundated with requests to change their password as a sort of magic elixir when the web site doesn't really know what to do. It costs the web site nothing to push the problem onto the user.
+Users have been inundated with requests to change their password as a sort of magic elixir when the web site doesn't really know what to do. It costs the web site nothing to push the problem onto the user. If the site were subsequently compromised it could argue that it had ratified its obligation by pushing the problem to the user.
 ==Solutions==

@@ Line 6: / Line 6: @@
 ==Solutions==
 ===Well-known URIs===
-* RFC5785 §1.1 Appropriate Use of Well-Known URIs
+* RFC 5785 §1.1 Appropriate Use of Well-Known URIs
     There are a number of possible ways that applications could use Well-
     known URIs.  However, in keeping with the Architecture of the World-

@@ Line 6: / Line 6: @@
 ==Solutions==
 ===Well-known URIs===
     There are a number of possible ways that applications could use Well-
     known URIs.  However, in keeping with the Architecture of the World-
@@ Line 15: / Line 16: @@
     be evaluated before a resource is accessed, or when using multiple
     round-trips is judged detrimental to performance.
 ===Change to Browser===
 *[https://www.chromestatus.com/feature/6256768407568384 Chrome Platform Status] for A well-known URL for changing passwords.

@@ Line 5: / Line 5: @@
 ==Solutions==
 ===Change to Browser===
 *[https://www.chromestatus.com/feature/6256768407568384 Chrome Platform Status] for A well-known URL for changing passwords.

@@ Line 9: / Line 9: @@
 * [https://w3c.github.io/webappsec-change-password-url/ Editor' Draft] A Well-Known URL for Changing Passwords
 * [https://bugs.chromium.org/p/chromium/issues/detail?id=927473 chromium Issue 927473:] Implement change-password-url ./well-known/change-password-url
 A change password url of an origin is a URL that points to a resource that clients can use to discover where a user should go to update their password on origin.

@@ Line 18: / Line 18: @@
 <pre>
 scheme
-origin’s scheme
+   origin’s scheme
 host
-origin’s host
+   origin’s host
 port
-origin’s port
+   origin’s port
 path
-« ".well-known", "change-password" ».
+   « ".well-known", "change-password" ».
 </pre>
 #Return url.
 ==References==

@@ Line 4: / Line 4: @@
 Users have been inundated with requests to change their password as a sort of magic elixir when the web site doesn't really know what to do. It costs the web site nothing to push the problem onto the user.
 ==References==
-[[Category: Security]
+[[Category: Security]]
 [[Category: User Experience]]