5 ms·
There are some sensible restrictions: You can't enter certain characters in input type=password fields on web sites, such as null or CRLF Max length for bcryp
by elchief 12y ago
There are some sensible restrictions:
You can't enter certain characters in input type=password fields on web sites, such as null or CRLF
Max length for bcrypt is 50-72
Incredibly long passwords could DOS your site
- pervycreeper 12y ago>Incredibly long passwords could DOS your site They don't need to permit arbitrarily long passwords, just ones that are long enough.
- elchief 12y agoWell you asked about arbitrary restrictions... :)
- pervycreeper 12y agoFair point. :) Although, in the first instance, I had meant `arbitrary' to mean something slightly different, more along the lines of `a condition chosen without adequate justification', rather than `permitting anything whatsoever', as in the second.