Comment 9 for bug 1697536
Revision history for this message
| Agustin Rivero (agustin-midokura) wrote | #9 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Come on,
this a client configuration not a server configuration. In a server you could enforce the user not to use a insecure password. But is it insecure to configure the client wrongly? It's like not allowing a login prompt to enter a short password. Security must be implementing when setting the password in the server not when login in!!
A client shouldn't impose restrictions in configuration, otherwise it's not a generic client, it's just a client that works in some cases and not being a technical limitation but a bad decision on where security must be implemented.
This applies for not allowing PSK in a client or not allowing a short password in a client.