Hello,
Am 16.11.2016 um 16:49 schrieb Steinsplitter Wiki:
> should be forked to change the password, if the password hasn't been
> changed for long time?

if you mean: now, for 1 time: yes (the problem is that there is no
databank-field that stores the change-date AFAIR).

if you mean: periodically: no. Because it is generally not a good idea
to force users to switch passwords or make too strong rules for
passwords. The reason is simple: The users will become creative to
circumvent it (they are not creative for strong passwords, but for
this). They will write their passwords down, create silly but long
passwords, use a pattern (like adding the month to a small password) and
so on.


Sincerely,
DaB.




-- 
Diese eMail sollte mit dem PGP-Schlüssel 0x7CD1E35FD2A3A158 signiert
sein. Misstrauen Sie unsignierten eMails!
PKA und OpenPGPKey im DNS vorhanden.

-- 
Benutzerseite: [[:w:de:User:DaB.]]
PGP: 0x7CD1E35FD2A3A158 (pka und OpenPGPKey funktionieren)

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to