13. Many websites require users to register before they can access informa- tion or services. Suppose...

Transcribed Image Text:

13. Many websites require users to register before they can access informa- tion or services. Suppose that you register at such a website, but when you return later you've forgotten your password. The website then asks you to enter your email address, which you do. Later, you receive your original password via email. a. Discuss several security concerns with this approach to dealing with forgotten passwords. b. The correct way to deal with passwords is to store salted hashes of passwords. Does this website use the correct approach? Justify your answer. 13. Many websites require users to register before they can access informa- tion or services. Suppose that you register at such a website, but when you return later you've forgotten your password. The website then asks you to enter your email address, which you do. Later, you receive your original password via email. a. Discuss several security concerns with this approach to dealing with forgotten passwords. b. The correct way to deal with passwords is to store salted hashes of passwords. Does this website use the correct approach? Justify your answer.

Answer rating: 100% (QA)

The image contains a question that is split into two parts a and b each dealing with the topic of pa... View the full answer