Re: FAS password complexity requirements

[Larry Brower <larry@xxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Minimum 12 characters
Alphanumeric
Mixed case
Minimum 2 special characters


- -- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.

Ricky Zhou <ricky@xxxxxxxxxxxxxxxxx> wrote:

Hey, so we discussed in the meeting, FAS's password requirements are currently very lax - just a minimum length of 8 characters. What do we think the requirements should be changed to? One possible strength checker that I mentioned during the meeting was: http://www.nongnu.org/python-crack/ This can use a dictionary to detect weak passwords. Thoughts? Ricky

---

infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/infrastructure

-----BEGIN PGP SIGNATURE-----
Version: APG v1.0.8

iQE/BAEBCgApBQJNgs6pIhxMYXJyeSBJLiBCcm93ZXIgPGxhcnJ5QG1heHFlLmNv
bT4ACgkQGBpdihn77zsO0QgAhDC4pZCi7ozWO/HtgIMtHSkkUp7n9ug5RgY6slLc
FBDEA9v/6y1xH1lky8IM4/1XP++AxPfDDA9oX2pwZfnWEX70vPvOnhVQsvsddnga
INAYTv00tzvK+xSqZTGdhcdluJzluqbyWC8Y3ws+bwRyuRDSs2Wmi8SgLR//UAjV
a0tLnR8y246i6ovA+2v/Pr6OwjvFTWop8gTTpdVeTJSlqHKgSInzFwoFQbB7P7wx
NAQT+5cRRY+v9SMTfCvAr2GhhdbOnNBJoBEdxeGqKFB3+T2KqK9Yok5PuJMA75fu
GOWxIUKUByBDZNtqIn4sETVgu4sYbgLaG9Qz5DN/DnZKWw==
=OcbC
-----END PGP SIGNATURE-----
_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure