Nice. So how many years will it take until someone realizes that asking users to include specific character classes actually decreases password security too? W

Nice. So how many years will it take until someone realizes that asking users to include specific character classes actually decreases password security too? What I mean is that if you ask your users for a password that includes lower-case letters, upper-case letters, numbers and special characters you will probably end up with something like 'Password123!'. Instead, we could ask our users for reasonably complex passwords without requiring to include specific characters sets. Yes, I am talking about https://www.xkcd.com/936/ https://www.xkcd.com/936/