"Administrators and/or customer service reps need to be able to see passwords for XYZ purposes" is a relative common requirement even nowadays, especially if th

"Administrators and/or customer service reps need to be able to see passwords for XYZ purposes" is a relative common requirement even nowadays, especially if those requirements were drawn up by non-technical people. One part of me wishes that the governments of the world would just outlaw this kind of idiocy. On the other hand, I'm not sure if I'd like that much regulation. I certainly wouldn't want to be a developer in a world where I can get sued for using a non-NIST-approved algorithm or something. Fortunately, "PCI-DSS" seems to be the magic word that can developers can use to beat sense into people's heads most of the time.