nanog mailing list archives
Re: Fun new policy at AOL
From: Jack Bates <jbates () brightok net>
Date: Fri, 29 Aug 2003 16:19:28 -0500
Valdis.Kletnieks () vt edu wrote:
So the provider allows the user to pick an insecure password, and then complains that they can't support a security measure because of their poor policy choices/enforcement?
You have an easy way to change password enforcement of an existing user base? Dealing with people infected with the latest worms has increased workloads across the board. That's only a small percentage of the user base. Password enforcement on an existing user base will cause problems for a majority of the user base.
Proprietary dialers help, but have their own problems. If you use the mail interface to change the dialup passwords, you'll get calls from users that can no longer dial in; otherwise you fragment passwords on an account and add overhead that's unnecessary. Adding the policy and waiting for it to rotate out would take over a decade.
I wouldn't recommend a policy change like that for any user base over 10,000.
-Jack
Current thread:
- RE: Fun new policy at AOL, (continued)
- RE: Fun new policy at AOL Vivien M. (Aug 29)
- Re: Fun new policy at AOL Matthew Crocker (Aug 29)
- RE: Fun new policy at AOL Vivien M. (Aug 29)
- Re: Fun new policy at AOL Matthew Crocker (Aug 29)
- RE: Fun new policy at AOL Vivien M. (Aug 29)
- RE: Fun new policy at AOL Adam Kujawski (Aug 29)
- Re: Fun new policy at AOL Ray Wong (Aug 30)
- RE: Fun new policy at AOL JC Dill (Aug 29)
- Re: Fun new policy at AOL Jack Bates (Aug 29)
- Re: Fun new policy at AOL Valdis . Kletnieks (Aug 29)
- Re: Fun new policy at AOL Jack Bates (Aug 29)
- Re: Fun new policy at AOL Valdis . Kletnieks (Aug 29)
- RE: Fun new policy at AOL JC Dill (Aug 29)
- RE: Fun new policy at AOL Vivien M. (Aug 29)
- Re: Fun new policy at AOL Omachonu Ogali (Aug 29)
- Re: Fun new policy at AOL Stephen J. Wilcox (Aug 30)
- Re: Fun new policy at AOL Omachonu Ogali (Aug 30)
- Re: Fun new policy at AOL Jack Bates (Aug 29)
- Re: Fun new policy at AOL Matthew Crocker (Aug 29)
- Re: Fun new policy at AOL Roland Perry (Aug 29)