Re: Hashing passwords

[Kai Wirt <u-turn1 () gmx de>]

> Just also revise enforcing password changing rules (every after 30 days) on your site and strong passwords(no less 
> then 8 characters, special characters, upper cases,numbers and symbols) , this helps when attackers try brute 
> forcing, so by the time they crack the password its no longer in use...   

There's an interesting paper on this topic:

http://research.microsoft.com/users/cormac/papers/2009/SoLongAndNoThanks.pdf

In short, most of the password rules employed today are mostly annoying to users and
don't really improve security.

Attachment: _bin
Description: