Re: Re[2]: password aging

[shields () crosslink net (Michael Shields)]

In article <88256673.007FF788.00 () gwwest sybase com>,
"Ryan Russell" <ryanr () sybase com> wrote:
> Seriously though... 18 million to choose from, if the user
> isn't allowed to pick their own, is a big improvement
> over people being able to choose from the dictionary.

Could be.  If you change your policy from allowing arbitrary
user-selected strings to requiring a six-character generated password,
then you know that no one will have a very bad password, but you also
know that no one will have a very good one.  It's your decision
whether that's a step forward or not.
-- 
Shields, CrossLink.