Quote:
Originally Posted by Mike Lewis
Obvioiusly, there are situations where masked passwords are essential: public computers in Internet cafes and libraries; computers in busy offices or sited near external windows; etc.
|
Even this isn't secure as Neilsen himself points out, if someone really wants your password and is staring over your shoulder they will be watching your keystrokes not your screen.
I think that masking provides confidence to some and frustration to others this will be one of those battles that will run and run. Ultimately until W3C change the specs for the <input type="password"> tag, as far as the web is concerned things are unlikely to change.