FAS password complexity requirements

[Larry Brower]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Minimum 12 characters
Alphanumeric
Mixed case
Minimum 2 special characters


- -- 
Sent from my Android phone with K-9 Mail. Please excuse my brevity.

Ricky Zhou <ricky at fedoraproject.org> wrote:

Hey, so we discussed in the meeting, FAS's password requirements are currently very lax - just a minimum length of 8 characters. What do we think the requirements should be changed to? One possible strength checker that I mentioned during the meeting was: http://www.nongnu.org/python-crack/ This can use a dictionary to detect weak passwords. Thoughts? Ricky_____________________________________________
infrastructure mailing list infrastructure at lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure

-----BEGIN PGP SIGNATURE----- Version: APG v1.0.8 iQE/BAEBCgApBQJNgs6pIhxMYXJyeSBJLiBCcm93ZXIgPGxhcnJ5QG1heHFlLmNv bT4ACgkQGBpdihn77zsO0QgAhDC4pZCi7ozWO/HtgIMtHSkkUp7n9ug5RgY6slLc FBDEA9v/6y1xH1lky8IM4/1XP++AxPfDDA9oX2pwZfnWEX70vPvOnhVQsvsddnga INAYTv00tzvK+xSqZTGdhcdluJzluqbyWC8Y3ws+bwRyuRDSs2Wmi8SgLR//UAjV a0tLnR8y246i6ovA+2v/Pr6OwjvFTWop8gTTpdVeTJSlqHKgSInzFwoFQbB7P7wx NAQT+5cRRY+v9SMTfCvAr2GhhdbOnNBJoBEdxeGqKFB3+T2KqK9Yok5PuJMA75fu GOWxIUKUByBDZNtqIn4sETVgu4sYbgLaG9Qz5DN/DnZKWw== =OcbC -----END PGP SIGNATURE----- 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20110317/cd0d78ea/attachment-0001.html