允许用户没有密码？
您认为如果网络服务不保存个人/安全数据，则应该由用户决定拥有或什至没有密码的密码长度，这一点是否正确？
Do you think it's a valid point, that if a web service holds no personal/security data it should be up to user what password length to haver or even to have no password?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
这取决于用户帐户的用途。这里使用了 3 种形式：
如果您关心身份验证或授权，那么您必须有密码。没有密码就毫无意义。如果您的唯一目标是识别，并且允许用户错误识别自己并没有真正的安全损失/收益，那么密码就变得多余了。同样，如果是这种情况，标识本身就变得多余，您应该考虑允许开放访问。
This depends on what the user account is used for. There are 3 forms used here:
If you're concerned either with Authentication or Authorization then you must have a password. Not having a password makes this pointless. If your only goal is identification and there is no real security loss/gain in allowing a user to misidentify him/herself, then a password becomes superfluous. Again, if this is the case, the identification itself becomes superfluous and you should consider allowing open access.
密码有什么用？它是为了帮助提供身份验证。如果您需要提供身份验证，那么您需要有方法来做到这一点。密码只是一个辅助工具。
What is a password for? It is to help provide authentication. If you need to provide authentication then you need means to do that. A password is merely a tool that assists that.
如果您允许用户没有密码，那么拥有帐户还有什么意义呢？账户的目的是问责制。没有密码就消除了这一点。
What's the point of having accounts if you're going to allow a user to not have a password? The purpose of accounts it accountability. Not having a password removes that.
如果您需要通过密码进行身份验证，那么您需要密码的安全性与您的网站操作对用户的安全性一样。
If you need authentication via passwords, then you need your passwords to be as secure as your site operations are to the users.
首先，正如其他答案明确指出的那样，您应该始终需要密码，因为不这样做会破坏身份验证的目的。
话虽如此，为什么不使用 openID 或 Facebook Connect 呢？现在有太多的网站需要注册，即使是最琐碎的事情。使用 Facebook Connect 或 OpenID 将为您在用户心目中带来巨大的可用性点。
First off, as the other answers stated clearly, you should always require a password as not doing so defeats the purpose of authentication.
Having said that, why not instead use openID or Facebook Connect? There are way too many sites now that require signing up for even the most trivial matters. Using Facebook Connect or OpenID will give you huge usability points in the mind of users.