On Mon, 2024-07-15 at 11:06 +0930, Tim via users wrote: > For instance, I scrolled through that and came across the section > about > users should be forced to periodically change their password. That's > always been dumb advice, even if only recently its starting to get > realised. IIRC it dates from decades ago when most people had only one login, if that, and it was typically to a mainframe. Unfortunately many companies still haven´t revised these criteria and just apply them blindly. Ironically, the most hidebound sites tend to be banks, which in my experience don't even let you use a password manager (other than in copy-paste mode), which is by far the best way for the average user to get good non-repeating passwords. poc -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue