Re:SaaS CTO Security Checklist
by tptacek on Thursday May 30, 2019 @08:10PM
(#20057162)
This is simply not true. You can read SP800-63B Appendix A to see the rationale NIST provides for not enforcing password complexity; it has nothing to do with MFA, and NIST believes the old rules to be intrinsically bad.
[ Parent
| on HN ]
There are no comments on this comment yet.