I read the federal government’s Zero-Trust Memo so you don’t have to

Re:I read the federal government’s Zero-Trust Memo so you do... by CGamesPlay on Thursday January 27, 2022 @01:37PM (#30104317)

I am a bit concerned that this will be read as "Password policies must require the use of no special characters", possibly as a misguided attempt to push people away from adding using "Password123!" as the password. I wish the memo had spelled out a little more clearly that there's nothing wrong with special characters, but they shouldn't be required. Also, is a whitespace a special character?

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by pm90 on Thursday January 27, 2022 @01:49PM (#30104479)

If we were to stop using special characters and only use human friendly phrases (eg “jupiterIsTheSmallestPlanet”) it wouldn’t be the end of the world.

[ Parent | on HN ]

Re:I read the federal government’s Zero-Trust Memo so you do... by godelski on Thursday January 27, 2022 @08:02PM (#30109430)

But if a whitespace is not a special character (or punctuation) we can add entropy with "Jupiter is the smallest planet!" while still being human readable and using the passphrase paradigm.

[ Parent | on HN ]