RE: "Proactive" Password Checking

[Matt Carothers <matt () telepath com>]

On Wed, 17 Nov 1999, Moore, James wrote:

> The only thing I'd add to Russ' comments are that passfilt.dll's activities
> must be constrained to assure the server does not get bogged down 

Nod, not to mention the fact that the more rules you apply to your passwords,
the smaller your keyspace becomes.  Eventually you reach a point of diminishing
returns.

> I still feel
> this belongs on the "back end". PDCs have more to do than pound on
> passwords.

Perhaps a better solution (or a complementary one) would be to run a 
heavyweight password cracker at regular intervals against all accounts 
and force users with weak passwords to change them at their next login.

- Matt