Post

If you *actually* care about the security of your platform you have to also care about usability. If it takes 35 steps for users to do the right thing and 3 to do the wrong thing, you are incentivizing bad practices. The "pit of success" is hardest to construct for security.