Banks, Arbitrary Password Restrictions and Why They Don't Matter

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by steventhedev on Wednesday September 18, 2019 @12:13PM (#21006861)

I worked dev (hence the username) and left the company more than 5 years ago, so I don't remember the exact regulations. I do remember it was a big deal towards end of 2012, so you're probably looking for something from around 2008 with a final enforcement date of 2012.

I'll update if I remember the name.

[ Parent | on HN ]

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by xmodem on Wednesday September 18, 2019 @03:29PM (#21009064)

There was a bunch of stuff to do with this in the first payment service directive, most of which was enforced around 2012-2013

https://en.wikipedia.org/wiki/Payment_Services_Directive

PSD2 has requirements on "strong customer authentication" basically requiring 2-factor, that were meant to come into force on Saturday the 14th of September just passed, but ended up being delayed at the last minute in most countries.

[ Parent | on HN ]