3 ms·

Wouldn't it make more sense to have this information in the website's manifest? This way we don't have to wait for a manual update and it doesn't have to be lim

• comex 9y ago
  If you know what you’re doing, you shouldn’t put a maximum on the length or character set of passwords, and you should accept any password that has some reasonable amount of entropy rather than putting in arbitrary restrictions like “must have 1 number and 1 symbol”. This is for the sake of users who want to supply their own passwords, but as a side effect, it means Safari’s default password generation algorithm should work fine. If you don’t know what you’re doing, you probably wouldn’t know how to put information in a manifest anyway…
• egypturnash 9y ago
  It would make sense, sure. Good luck getting every bank/utility/store/etc to update the system they set up ten years ago and haven’t updated since to broadcast that information. You’ll probably have to get a law passed. Until then, this way works.
• Antrikshy 9y ago
  Well, yes, but standards are kinda hard to incite.
  • cal5k 9y ago
    Sounds like we need a standard for setting standards to make this easier!
• rocqua 9y ago
  Consider a site that still enforces rules like: 8-12 characters, ASCII only, at least one lowecase, uppercase and number. Does that seem like the kind of site that will take action to help users with password managers? Personally, I wouldn't expect that kind of site to be quite up-to-date with the newest security practices.