3 ms·

I have only one thing to nag about. Password complexity rules. Please only do length check and promote checking against dictionary passwords to be rejected. For

by ozim 9y ago

I have only one thing to nag about. Password complexity rules. Please only do length check and promote checking against dictionary passwords to be rejected. For password security this was last year hot document: https://www.nist.gov/itl/tig/projects/special-publication-800-63 https://www.nist.gov/itl/tig/projects/special-publication-80...

jerrre 9y ago
There could be a different between password rules for your users, and for your employees. The former should probably be more focused on usability, the latter on security.
- ozim 9y ago
  Sounds reasonable, since you can (and should) enforce use of password manager by your employees.