In our environment, we know that eliminating certain characters and digits from the available pool, reduces help desk calls, but ymmv.
However, what's good/bad security is beside the point. My suggestion gives the individual Administrator much much more flexibility to choose a policy which they deem works best in their environment and the ability to tweak it as needed. My suggestion is for Ipswitch to recognize that not everyone wears size 10-1/2 shoes, is a Republican or wears Microsoft underwear and, therefore, to program in the additional flexibility and serve a much larger audience. Thanks, Sunday, July 9, 2006, 3:29:44 PM, Rod Dorman <[EMAIL PROTECTED]> wrote: RD> On Sunday, July 9, 2006, 14:56:51, Don Brown wrote: >> ... >> Also, allow the user to select the characters, symbols and digits, >> i.e. we avoid zero and "O", one and "l", v and w, V and W and the >> characters commonly used in connection with databases, such as %, ?, >> etc. RD> IMHO this is not a good idea RD> * a frequent recommendation is to replace letters with look RD> alike digits (and vice versa) RD> * reducing the potential key space is not a good thing RD> * what does databases have to do with picking passwords? ---- Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364 Fax: (972) 788-5049 ---- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
