How Much Security is Enough?
Lack of incident information
Difficulty in predicting future technologies
Current levels seem “unbreakable”
- Brute-force attacks may take forever
- Consumers are uninformed about proper levels
Strength is irrelevant if used improperly