<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Mark’s right, it’s a user interface… but one specifically intended for creating something equivalent to a password: a sequence of user actions that is able to provide high entropy relative to the set of possible sequences. And Windows has
had this type of authentication UI since Windows 8: it’s called “picture password”.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><img width="421" height="74" style="width:4.3833in;height:.7666in" id="Picture_x0020_1" src="cid:image001.png@01D84F54.374D4E50"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Peter<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Unicode <unicode-bounces@corp.unicode.org> <b>On Behalf Of
</b>Mark E. Shoulson via Unicode<br>
<b>Sent:</b> Friday, April 8, 2022 1:59 PM<br>
<b>To:</b> unicode@corp.unicode.org<br>
<b>Subject:</b> Re: global password strategies<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>That's not a format, it's a user interface ("the user is presented...") Unicode doesn't standardize user interfaces. Restricting the permissible alphabet to emoji is just about as bad/annoying (for many users) as restricting it to ASCII or Cyrillic or
whatever, except that it's more evenly hard on everyone.<o:p></o:p></p>
<p><o:p> </o:p></p>
<p>~mark<o:p></o:p></p>
<p><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 4/8/22 06:48, William_J_G Overington via Unicode wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Tex wrote: <o:p></o:p></p>
<div>
<p><o:p> </o:p></p>
<p>> Also, there are some apps that are serving users that are not computer literate. They may be handed a tablet to enter information or similar scenarios.<o:p></o:p></p>
<p>There could be a password input format that is both script-independent and language-independent and platform-independent where the end user is presented with a display of a, say, 8 by 8 grid of emoji and the end user needs to have a password by clicking
on of at least eight of them in a sequence, with the only restriction being that no emoji shall be used twice in immediate succession, this to avoid accidental double clicking causing problems.<o:p></o:p></p>
<p>The emoji chosen to be used in the format would need to be chosen carefully so as to be clearly distinct from each other whether the display is in colour or in monochrome and taking account of colour vision issues (so not both RED APPLE and GREEN APPLE),
non-violent, respectful to cultures and religions, and so that the format could be used both in left to right situations and in right to left situations without ambiguity if characters are mirrored horizontally.<o:p></o:p></p>
<p>If the format were published by Unicode Inc. it could become widely used around the world in some situations.<o:p></o:p></p>
<p>William Overington<o:p></o:p></p>
<p>Friday 8 April 2022<o:p></o:p></p>
<p><o:p> </o:p></p>
</div>
</div>
</blockquote>
</div>
</body>
</html>