global password strategies

[Peter Constable]

Mark’s right, it’s a user interface… but one specifically intended for creating something equivalent to a password: a sequence of user actions that is able to provide high entropy relative to the set of possible sequences. And Windows has had this type of authentication UI since Windows 8: it’s called “picture password”.

[cid:image001.png at 01D84F54.374D4E50]


Peter

From: Unicode <unicode-bounces at corp.unicode.org> On Behalf Of Mark E. Shoulson via Unicode
Sent: Friday, April 8, 2022 1:59 PM
To: unicode at corp.unicode.org
Subject: Re: global password strategies


That's not a format, it's a user interface ("the user is presented...")  Unicode doesn't standardize user interfaces.  Restricting the permissible alphabet to emoji is just about as bad/annoying (for many users) as restricting it to ASCII or Cyrillic or whatever, except that it's more evenly hard on everyone.



~mark


On 4/8/22 06:48, William_J_G Overington via Unicode wrote:
Tex wrote:



> Also, there are some apps that are serving users that are not computer literate. They may be handed a tablet to enter information or similar scenarios.

There could be a password input format that is both script-independent and language-independent and platform-independent where the end user is presented with a display of a, say, 8 by 8 grid of emoji and the end user needs to have a password by clicking on of at least eight of them in a sequence, with the only restriction being that no emoji shall be used twice in immediate succession, this to avoid accidental double clicking causing problems.

The emoji chosen to be used in the format would need to be chosen carefully so as to be clearly distinct from each other whether the display is in colour or in monochrome and taking account of colour vision issues (so not both RED APPLE and GREEN APPLE), non-violent, respectful to cultures and religions, and so that the format could be used both in left to right situations and in right to left situations without ambiguity if characters are mirrored horizontally.

If the format were published by Unicode Inc. it could become widely used around the world in some situations.

William Overington

Friday 8 April 2022


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://corp.unicode.org/pipermail/unicode/attachments/20220413/9e44ae36/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 5776 bytes
Desc: image001.png
URL: <https://corp.unicode.org/pipermail/unicode/attachments/20220413/9e44ae36/attachment-0001.png>