4 ms·
Yeah but when you partner with companies, they sometimes force your company to adhere to those ancient guidelines. I’ve worked for companies where they ask for
by someonehere 7y ago
Yeah but when you partner with companies, they sometimes force your company to adhere to those ancient guidelines.
I’ve worked for companies where they ask for the out of date NIST stuff you mention and it’s either you follow what they ask or you lose out on a deal to fund your company.
- DKnoll 7y agoIf you require PCI DSS compliance it won't fly either. https://pcipolicyportal.com/blog/pci-compliance-password-requirements-best-practices-know/ https://pcipolicyportal.com/blog/pci-compliance-password-req...
- yaleman 7y agoIf you require PCI DSS I hope you're not just blindly following some random post on hackernews for your policy ;)
- DKnoll 7y agoI'm not, that's why I know PCI DSS requirements off-hand.
- downtown_ 7y agoNo. You can use NIST guidance and are not required to change your password every 90 days