Password Management

Objective:

Keep user certificate passwords safe.

Guidelines:

• Never store user certificate passwords in a database or in any file that others could access.
• Always use HTTPS so that passwords are encrypted while travelling between the user's browser and your server. This stops attackers from intercepting them.