Re: Should user passwords be more strict?

[schinckel]

Attached is a post that requires all passwords to be:

'correct horse battery staple'

:)

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/django-developers/-/GBAQF7IoHhYJ.
To post to this group, send email to django-developers@googlegroups.com.
To unsubscribe from this group, send email to 
django-developers+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en.

Re: Should user passwords be more strict?

[Brett H]

All you need to know about implementing your own policy:

http://xkcd.com/936/

On Sep 14, 1:17 pm, Paul McMillan  wrote:
> I'm happy you're concerned about this, but suggest you search the
> archives for similar material so that new threads can contribute new
> content.
>
> This search is probably a fantastic starting point for your reading 
> pleasure:http://groups.google.com/group/django-developers/search?group=django-...
>
> Regards,
> -Paul
>
>
>
>
>
>
>
> On Tue, Sep 13, 2011 at 3:52 PM, Wim Feijen  wrote:
> > Having just finished a discussion on security, I'd like to raise a
> > concern of mine.
>
> > By default, users can have a one-character password.
>
> > When their accounts get hacked, we suffer the consequences as well.
>
> > Should we be more strict in that?
>
> > Wim
>
> > --
> > You received this message because you are subscribed to the Google Groups 
> > "Django developers" group.
> > To post to this group, send email to django-developers@googlegroups.com.
> > To unsubscribe from this group, send email to 
> > django-developers+unsubscr...@googlegroups.com.
> > For more options, visit this group 
> > athttp://groups.google.com/group/django-developers?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To post to this group, send email to django-developers@googlegroups.com.
To unsubscribe from this group, send email to 
django-developers+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en.

Re: Should user passwords be more strict?

[Paul McMillan]

I'm happy you're concerned about this, but suggest you search the
archives for similar material so that new threads can contribute new
content.

This search is probably a fantastic starting point for your reading pleasure:
http://groups.google.com/group/django-developers/search?group=django-developers=password+policy_g=Search+this+group

Regards,
-Paul

On Tue, Sep 13, 2011 at 3:52 PM, Wim Feijen  wrote:
> Having just finished a discussion on security, I'd like to raise a
> concern of mine.
>
> By default, users can have a one-character password.
>
> When their accounts get hacked, we suffer the consequences as well.
>
> Should we be more strict in that?
>
> Wim
>
> --
> You received this message because you are subscribed to the Google Groups 
> "Django developers" group.
> To post to this group, send email to django-developers@googlegroups.com.
> To unsubscribe from this group, send email to 
> django-developers+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/django-developers?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To post to this group, send email to django-developers@googlegroups.com.
To unsubscribe from this group, send email to 
django-developers+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en.

Should user passwords be more strict?

[Wim Feijen]

Having just finished a discussion on security, I'd like to raise a
concern of mine.

By default, users can have a one-character password.

When their accounts get hacked, we suffer the consequences as well.

Should we be more strict in that?

Wim

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers" group.
To post to this group, send email to django-developers@googlegroups.com.
To unsubscribe from this group, send email to 
django-developers+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-developers?hl=en.