News for hackers. Stuff that matters.

A comment on Saas CTO Security Checklist. Parent comment

Re:Saas CTO Security Checklist by ozim on Monday March 19, 2018 @04:52AM (#16616954)
I have only one thing to nag about. Password complexity rules. Please only do length check and promote checking against dictionary passwords to be rejected. For password security this was last year hot document: https://www.nist.gov/itl/tig/projects/special-publication-80...
[ Parent | on HN ]
Re:Saas CTO Security Checklist by jerrre on Monday March 19, 2018 @05:45AM (#16617165)
There could be a different between password rules for your users, and for your employees. The former should probably be more focused on usability, the latter on security.
[ Parent | on HN ]
Re:Saas CTO Security Checklist by ozim on Monday March 19, 2018 @09:44AM (#16618264)
Sounds reasonable, since you can (and should) enforce use of password manager by your employees.
[ Parent | on HN ]