Re:Stop deploying web application firewalls
by junon on Tuesday November 14, 2023 @06:12AM
(#38261810)
Got into a quarrel about this with our IT director at a previous company. I wish there was a security best practices FAQ I could link to for this sort of stuff.
[ Parent
| on HN ]
Re:Stop deploying web application firewalls
by placatedmayhem on Wednesday November 15, 2023 @12:28PM
(#38279503)
As a peer post of yours pointed out, NIST changed guidance to discourage password changes years ago:
https://pages.nist.gov/800-63-3/sp800-63b.html#memorizedsecr...