Password History Policy Question

[Roberto C. Sánchez]

On Thu, Jan 17, 2008 at 02:54:47PM -0600, John Hascall wrote:
> 
> <soapbox>
> I realize that these sorts of password rules are often externally dictated,
> but it's not clear to me (or many others) that they actually have a positive
> effect on security).
> </soapbox>
> 
They don't.  In fact, it has been demonstrated time and again that these
sorts of draconian policies have a negative effect on security.

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20080117/3543f01c/attachment.bin