On Wed, Mar 19, 2025 at 11:01 AM Nathan Bossart <[email protected]> wrote:
> One of the main reasons I'm not totally sold on a clear-text password > warning is because we don't have > agreement on removing that ability anytime soon, not to mention > Bruce's point about the debate extending into mid-March. > Okay, we are now safely past last March :). Any further thoughts on this? My preference is still warn by default, but I could also be on board with ignore by default. Nathan, I'm not sure that having a concrete resolve to someday remove cleartext passwords should be a blocker to warning now that they are a bad idea, but open to discussion there. Cheers, Greg
