Security: stronger password requirements
Bug #457357 reported by
root
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
psiphon |
Confirmed
|
Unknown
|
Unassigned |
Bug Description
* Recommend at least 6 characters, plus mix of classes.
* Could have stronger requirements for more privileged users (Admin, etc.) -- would need some tricky logic in case where user role changes.
* Other common practices:
* User name not a substring
* Dictionary checks (excepting passphrases)
* Expiry & history?
* There's a lot of good info here: http://
description: | updated |
Changed in psiphon: | |
status: | New → Confirmed |
visibility: | private → public |
tags: | added: category3 |
To post a comment you must log in.