> > My question is, Why is automatic password expiry a good idea?
> > It's a pain, and encourages bad password management. I'll probably log
onto
> > each system every 60 days and set them all to the same one.
>
> Not that I necessarily agree with what this says, it's definately
interesting
> and worth thinking about:
>
> Security and Human Factors
> http://www.useit.com/alertbox/20001126.html
>
Seems to agree with me, I like him already :-)
Basically a lot of password restrictions sound like a good idea in theory,
but when real people have to cope with them they fail miserably.
/Robert
