Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #10500: Remove default password composition rule

Download Browse

Password composition rules are now proven to be counter productive, users do not make stronger password because of them (and they are annoying). Recent guidelines on authentication & lifecycle management advise against them [1][2]. [1] https://www.nist.gov/itl/tig/special-publication-800-63-3 [2] [PDF] https://www.microsoft.com/en-us/research/wp-content/uploads/2016/06/Microsoft_Password_Guidance-1.pdf Change-Id: I0830e728fba7bd3c4852c0dbfa28d6adad267d9b

+35 −6
Thomas Gerbet (tgerbet) 2017-07-26 18:13
Thomas Gerbet (tgerbet) 2017-07-26 18:13
ad5a5e973f46b39378257848a15d2fec5a2e0b9f
01ec2341648563f5b086b87c69882f2f87c87c00
git #tuleap/stable/ad5a5e973f46b39378257848a15d2fec5a2e0b9f

Modified Files

Side by side diff
Inline diff
Name
M site-content/en_US/account/password_strategy.txt +19 −3 Go to diff View file
M site-content/fr_FR/account/password_strategy.txt +16 −3 Go to diff View file