If you had a machine readable definition for what is allowed within a password, wouldn't it make more sense to put that close to the password entry itself (e.g.

If you had a machine readable definition for what is allowed within a password, wouldn't it make more sense to put that close to the password entry itself (e.g. on the input element/page)? Having a site-wide definition seems like it would require a lot of mechanics to target specifc pages or properties that may have different rules (e.g. consumer Vs. corporate logins). I still hope companies start following NIST guidelines and stop having password rules entirely.