tag:blogger.com,1999:blog-9189811149336712938.post7987495493745468966..comments2008-07-26T05:00:48.438-07:00Yuen-Chi Lianhttp://www.blogger.com/profile/00962882447601829374noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-9189811149336712938.post-3464522144823725292008-07-26T04:59:00.000-07:002008-07-26T04:59:00.000-07:00Communicating via IRC (or any other plain text protocol) is like passing a private note to someone. The only privacy protection is the paper fold. To read the message, one needs only to be in the 'delivery path'.<BR/><BR/>This is not too much of a problem (maybe not a problem at all) with SSL. You're sure who you are talking to and no one, other than you and the recipient, will be able to understand the conversation.<BR/><BR/>However, not all sites are SSL enabled. That's when I think pools of passwords categorized by the sites' security would be useful. For instance, accounts with SSL-enabled web sites will use passwords from a particular pool, while non SSL-enabled web sites from another.<BR/><BR/>That way, if an account gets compromised, you don't risk losing any other account that shares the same password.<BR/><BR/>Occasional password changes will help too.David Chuihttp://www.blogger.com/profile/15633853802656853463noreply@blogger.com