https://bugzilla.wikimedia.org/show_bug.cgi?id=9816





--- Comment #28 from Philippe Verdy <[email protected]>  2009-11-14 19:06:56 
UTC ---
"I do not believe in restricting user's passwords to force them
to be stronger: users choose their own passwords, as wisely or as unwisely as
they want".

Did I suggest that? No. I exactly propose to help user to choose their password
wisely, and in fact more freeely that what the other suggestions below are
doing, because I don't want to force users to use a mix of capital/lowercase
letters, or digits.

The algorithm will be relaxed enough to allow users to choose whatever
characters they want, or the password length they want, or even pass phrases
(when accepting spaces), WITHOUT reducing the search space (in fact it does NOT
restrict the search space, but increases it by allowing MORE freedom for users,
and MORE difficulties for password crackers). And I also give caution that
dictionnary lookups are bad if the dictionnary is wellknown and is enforced in
a restrictive way (because it will actually help the password crackers if it is
enforced).


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to