Hi Carl,

thanks a lot for your suggestion.
I am not too sure if this will really add more security. From the rules
the following would be valid passwords:

01234567890123456789
qwertyuiopasdfghjklz

For LAM 6.4 we plan to implement password checking via this service (or
any local one that uses the same API).

https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/

This will check your password was not part of one of the last big
password leakages.


Best regards

Roland


On 21.03.2018 22:09, Carl G. Riches wrote:
> 
> This is request for LAM to implement something like the Stanford
> password rule to strengthen user passwords such that it is applied when
> a user sets or resets his or her password.  Because there are some
> locations using LAM that would not want this, it would be good to make
> it possible to toggle between the current password-setting mechanism and
> the new, more secure mechanism.
> 
> Not only will this help with account security for groups that use LAM,
> but also help with password security for those myriads of people who use
> the same password at multiple sites.
> 
> Information about Stanford's password security is at:
> 
>   https://uit.stanford.edu/service/accounts/passwords
> 
> Thank you,
> Carl
> 
> Carl G. Riches
> IT Director
> Department of Biostatistics
> Box 357232                      voice:     206-616-2725
> University of Washington        fax:       206-543-3286
> Seattle, WA  98195-7232         internet:  [email protected]
> 
> ------------------------------------------------------------------------------
> 
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Lam-public mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/lam-public

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to