logoalt Hacker News

kstrauseryesterday at 3:58 PM0 repliesview on HN

That's an interesting way to describe it. It's kind of like the turn away from requiring regular password updates. On paper, password rotation is good. But when you consider its interaction with human psychology, the policy makes security worse by causing people to make bad decisions.