Optimized Authentication Scheme for Web Application
So long, and no thanks for the externalities: the rational rejection of security advice by users