Should websites be required to publicly disclose their password strategy?troyhunt.com2 pointsamazedsaint12 years ago