On 2010-06-24 6:31 AM, Matti Haack wrote:
>> Good idea, but why not just use cracklib or something that is already
>> designed and well tested for something like this:
>> 
>> http://search.cpan.org/dist/Crypt-Cracklib/Cracklib.pm

> This would be helpful too.
> But I think ASSP already includes lot of code to check regexes, so a
> simple regex text would may be easier? But I am not a Perl Programmer.
> With regexs you could also block company names, Product Names etc. and
> maybe  Cracklist  Word  is  too  wide  to  use as a blocklist for SMTP
> Passwords

Passwords should *never* be or contain dictionary words...

> But using both would be the optimum.

+1 definitely - being able to also easily forbid using the username,
domain, etc in the password, and things like that without having to
design a complicated regex every time would be very nice...

-- 

Best regards,

Charles

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to