Re:NIST advises services to not require that passwords be ch...
by dsacco on Saturday May 20, 2017 @01:57PM
(#14383503)
Why do you think it's silly? There are only two reasons to change a password:
1. The cover time (expected duration of secrecy) is about to expire, either due to advances in technology or because it was too small to begin with; or
2. The password was compromised and is no longer secret.
If a password has not been compromised and is sufficiently strong as to not be crackable without a server farm and hundreds of thousands of years, it doesn't make sense to change it.
1. The cover time (expected duration of secrecy) is about to expire, either due to advances in technology or because it was too small to begin with; or
2. The password was compromised and is no longer secret.
If a password has not been compromised and is sufficiently strong as to not be crackable without a server farm and hundreds of thousands of years, it doesn't make sense to change it.