5 ms·
Yes. It's a DoS vector. The question is, what is a reasonable limit - and 16 characters fails horribly in that section.
by groby_b 13y ago
Yes. It's a DoS vector. The question is, what is a reasonable limit - and 16 characters fails horribly in that section.
- cookiecaper 13y agoRight, as the OP said, there is no reasonable excuse to limit character intake to less than multiple hundreds. I agree that some limit is sensible just to ensure someone doesn't insert War and Peace (or base64-encoded binaries or whatever) as their password.