Educause Security Discussion mailing list archives

Re: (***POSSIBLE SPAM***) Re: [SECURITY] Password Expatriation notification


From: Charles Buchholtz <chip+educause () SEAS UPENN EDU>
Date: Thu, 19 Aug 2010 15:19:47 -0400

On Thu, Aug 19, 2010 at 02:03:29PM -0400, Valdis Kletnieks wrote:
On Thu, 19 Aug 2010 13:48:35 EDT, Charles Buchholtz said:

We allow passwords (minimum 9 chars) and pass-phrases (minimum 16
chars). 

How do you tell if a 14 character string is a password or a passphrase?

Passwords cannot contain words from our dictionary, or common variants
of words in our dictionary.  ">bZony5PT8" is a good password, and
"Seven white horses!" is a good pass-phrase, but "Seventeen" and
"5even+33n" are not accepted.

--- Chip

Charles H. Buchholtz                    Director of Systems Programming
chip () seas upenn edu            School of Engineering and Applied Science
http://www.seas.upenn.edu/~chip           University of Pennsylvania


Current thread: