Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New Failure Technique F109 for Issue #1918 Accessible Authentication needs better techniques #2990

Closed
wants to merge 18 commits into from
Closed

New Failure Technique F109 for Issue #1918 Accessible Authentication needs better techniques #2990

Show file tree
Hide file tree
Changes from 17 commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
e196333
Create F109.HTML
dan-hw Jan 31, 2023
9edb874
Update and rename F109.HTML to F109.html
dan-hw Jan 31, 2023
30cf7db
Update F109.html
dan-hw Jan 31, 2023
e478af8
Update F109.html
dan-hw Feb 1, 2023
27b4634
Update F109.html
dan-hw Feb 1, 2023
40ea878
Update F109.html
dan-hw Feb 1, 2023
c49dfe7
Update F109.html
dan-hw Feb 1, 2023
5a1a3b6
Update F109.html
dan-hw Feb 1, 2023
029d3b3
Update accessible-authentication.html
dan-hw Feb 1, 2023
03f191d
adding F109 failure technique
dan-hw Feb 1, 2023
2677c61
Repointing links to SC3.3.8
dan-hw Feb 1, 2023
c110201
Removing stray </link> tag
dan-hw Feb 2, 2023
98909c4
Adding missed <p> element
dan-hw Feb 2, 2023
24693d2
Clarifying difference in password format between creation & authentic…
dan-hw Feb 3, 2023
e07aa98
Update techniques/failures/F109.html
dan-hw Feb 10, 2023
dbb310d
clarifying support for custom paste across multiple fields
dan-hw Feb 14, 2023
1e6f1ba
Update techniques/failures/F109.html
dan-hw May 1, 2023
d19fb54
Apply suggestions from code review - applicable to both passcodes and…
dan-hw May 2, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 33 additions & 0 deletions techniques/failures/F109.html
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
<!DOCTYPE html><html lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml">

<head><title>Failure of Success Criterion 3.3.8 and 3.3.9 due to forcing transcription of individual password characters</title>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this title just saying "Failure of .... due to requiring manual entry of passwords"? Would that be simpler?


<link rel="stylesheet" type="text/css" href="../../css/sources.css" class="remove"></head><body><h1>Failure of Success Criterion 3.3.8 and 3.3.9 due to forcing transcription of individual password characters</h1><section class="meta"><p class="id">ID: F109</p><p class="technology">Technology: failures</p><p class="type">Type: Failure</p></section><section id="applicability"><h2>When to Use</h2>
dan-hw marked this conversation as resolved.
Show resolved Hide resolved
<p>All technologies that require authentication.</p>
</section><section id="description"><h2>Description</h2>
<p>Requiring users to authenticate by entering a password in a different format from which it was originally created is a failure to meet Success Criteria 3.3.8 and 3.3.9 (unless alternative authenticaton methods are available). If a user is required to enter individual password characters across multiple fields, in a way that prevents pasting the password in a single action, it prevents use of a password manager or pasting from local copy of the password. This means users cannot avoid transcription, resulting in a <a href="../../understanding/22/accessible-authentication.html#dfn-cognitive-function-test">cognitive function test</a>. This applies irrespective of whether users are required to enter all characters in the password, or just a subset.</p>
dan-hw marked this conversation as resolved.
Show resolved Hide resolved


</section><section id="examples"><h2>Examples</h2>
<p>These examples would prevent a user from entering a password in the same format in which the password was originally created:</p>
<ul>
<li>A fieldset that prompts a user to "Enter the 2nd, 6th and last characters of your password", with separate input fields for each character.</li>
<li>A fieldset that prompts a user to enter each digit of a passcode in a separate input (unless the user can paste the entire passcode in the first input, and the remaining inputs are populated automatically).</li>
<li>A password input fieldset composed of <code class="el">&lt;select&gt;</code> elements that requires a user to select each character of a fixed-length password from individual dropdown fields.</li>
</ul>
</section>

<section id="tests"><h2>Tests</h2>
<section class="procedure"><h3>Procedure</h3>
<ol>
<li>Check if the structure of the password input field(s) prevents the user from pasting or auto-filling their entire password in the format in which it was originally created.</li>
dan-hw marked this conversation as resolved.
Show resolved Hide resolved
<li>Confirm that no other acceptable authentication methods are present that satisfy Success Criteria 3.3.8 or 3.3.9 (such as an authentication method that does not rely on a cognitive function test).</li>
</ol>
</section>
<section class="results"><h3>Expected Results</h3>
<ul>
<li>If steps #1 and #2 are true, then this failure condition applies and content fails the Success Criterion.</li>
</ul>
</section>
</section><section id="related"><h2>Related Techniques</h2></section>
<section id="resources"><h2>Resources</h2></section></body></html>
6 changes: 5 additions & 1 deletion understanding/22/accessible-authentication-enhanced.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -119,7 +119,11 @@ <h3>Additional Techniques (Advisory) for Accessible Authentication (Enhanced)</h

<section id="failure">
<h3>Failures for Accessible Authentication (Enhanced)</h3>

<ol>
<li>
<a href="../../techniques/failures/F109.html">Failure of Success Criterion 3.3.8 and 3.3.9 due to forcing transcription of individual password characters</a>
</li>
</ol>
</section>

</section>
Expand Down
7 changes: 7 additions & 0 deletions understanding/22/accessible-authentication.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -148,6 +148,13 @@ <h3>Additional Techniques (Advisory) for Accessible Authentication</h3>

<section id="failure">
<h3>Failures for Accessible Authentication</h3>
<ol>
<li>
<a href="../../techniques/failures/F109.html">Failure of Success Criterion 3.3.8 and 3.3.9 due to forcing transcription of individual password characters</a>
</li>
</ol>
</section>


</section>

Expand Down