Re: [Savannah-users] password must contain multiple character classes...

[Miles Bader]

address@hidden (Karl Berry) writes:
> How is your password "much" better?  Using non-alphanumeric
> characters?  I thought they were allowed even though the message
> doesn't mention them.

I think there's a pretty general consensus by now that this sort of
requirement ("must contain a digit and a punctuation symbol" or
whatever) does more harm than good.  Most certainly it's annoying...

http://xkcd.com/936/

-miles

-- 
We are all lying in the gutter, but some of us are looking at the stars.
-Oscar Wilde