4 ms·
Why would you need to disable autocomplete passwords for PCI compliance?
by driverdan 7y ago
Why would you need to disable autocomplete passwords for PCI compliance?
- toast0 7y agoBecause either the PCI standard says so, or the PCI consultant says so. PCI compliance is about checking boxes, not weighing the options and making good choices.
- cdubzzz 7y agoExactly this. Some of the checks _are_ valuable. We found a couple of real issues and made good security improvements. But we also ticked off more than a few boxes that made no damn real sense.