diff --git a/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc b/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc index ba5981da4..4df7cb7cb 100644 --- a/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc +++ b/webgoat-lessons/password-reset/src/main/resources/lessonPlans/en/PasswordReset_SecurityQuestions.adoc @@ -1,6 +1,6 @@ == The Problem with Security Questions -While Security Questions my at first seem like a good way to do authentication, they +While Security Questions may at first seem like a good way to do authentication, they have some big problems. The "perfect" security question should be hard to crack, but easy to remember. Also the answer needs to fixed, @@ -13,4 +13,4 @@ If you have to pick a security question, we recommend not answering them truthfu To further elaborate on the matter, there is a small assignment for you: There is a list of some common security questions down below. if you choose one, it will show to you why the question you picked is not really as good as one may think. -When you have looked at two questions the assignment will be marked as complete. \ No newline at end of file +When you have looked at two questions the assignment will be marked as complete.