3 ms·
No. A potential common excuse may be, "No one will remember a secure password in excess of 16 characters, we are trying to minimize support volume", but this i
by cookiecaper 13y ago
No.
A potential common excuse may be, "No one will remember a secure password in excess of 16 characters, we are trying to minimize support volume", but this is not a "reasonable" excuse.
- groby_b 13y agoYes. It's a DoS vector. The question is, what is a reasonable limit - and 16 characters fails horribly in that section.
- cookiecaper 13y agoRight, as the OP said, there is no reasonable excuse to limit character intake to less than multiple hundreds. I agree that some limit is sensible just to ensure someone doesn't insert War and Peace (or base64-encoded binaries or whatever) as their password.