3 ms·
“Mandatory password change intervals” This is against all current commonly applied security recommendations (NIST, OWASP).
by ahoka 2y ago
“Mandatory password change intervals”
This is against all current commonly applied security recommendations (NIST, OWASP).
- kayodelycaon 2y agoAnd the rest of the world hasn’t gotten the memo. Rotating passwords was best practice for so long that every standard required it. Those haven’t been updated. Until it’s considered to be actively harmful and you fail audits for it, it won’t die. :(
- Tostino 2y agoI had to push back at my company after getting acquired multiple times that no, I am not implementing your much worse password policies that NIST has argued against for years. All because some 15 year old security document said that's what all their products adhere to.