Re:The “security.txt” proposal reached last step in the IETF...
by Dylan16807 on Thursday December 12, 2019 @05:03AM
(#21770670)
Any half competent brute force is going to do the simpler patterns first anyway. Knowing the exact set of special characters allowed won't make it significantly faster.
It's a lot like telling someone the exact length of your password. Okay, by knowing that it's 11 characters they can skip testing 1-10... but that only lets them skip 2% of the calculations.
It's a lot like telling someone the exact length of your password. Okay, by knowing that it's 11 characters they can skip testing 1-10... but that only lets them skip 2% of the calculations.