Storing encrypted passwords

Question

My coworker and I are having a fist-fight civilized discussion over password security. Please help us resolve our differences.

One of us takes the v

Answer 1

• Why should CEOs be more reliable / trustworthy than other people? There are example of high-ranking government people who have lost confidential data.
• There's no reason a regular site has to store a password, not a single one.
• What happens if in the future those private keys can be broken? What if the key used is a weak key, as has happened just recently in Debian.

The bottom line is: Why would one take such great risks for little to no benefit. Most companies aren't ever going to need an encrypted password.