I think focusing on password length as an attribute of strength reveals an intrinsic weakness of passwords in general. We're reaching a point where any password

I think focusing on password length as an attribute of strength reveals an intrinsic weakness of passwords in general. We're reaching a point where any password that is humanly memorable is not in the set of strong passwords. It's a tragic flaw that all permutations available from an entropy pool aren't equally strong. The fundamental problem of identity assurance needs to solved, and it's sad that passwords represent both the state of the art and its weakest link.