Secure Syntax Should Be Simpler Than Insecure

• When user has choice between two different syntaxes -- one less secure, one more secure:

  • ... default syntax should be the *more secure* one

  • More secure syntax should be obviously easier to use

    • Fewer keystrokes

    • Fewer options or switches