I’m not very hopeful of the effect given a high profile example of their failure: they issue high quality password strength guidelines, and they can’t even get

I’m not very hopeful of the effect given a high profile example of their failure: they issue high quality password strength guidelines, and they can’t even get most Federal agencies to adopt them. CSF has a fair amount of traction I guess. I’d be happy for my pessimism to be proven wrong.