search

italia / daf

Data & Analytics Framework (DAF)
BSD 3-Clause "New" or "Revised" License
50 stars 32 forks source link

Password policy improvements #124

Open gvarisco opened 6 years ago

gvarisco commented 6 years ago

NIST’s new guidelines say you need a minimum of 8 characters. (That’s not a maximum minimum – you can increase the minimum password length for more sensitive accounts.) Better yet, NIST says you should allow a maximum length of at least 64. Also, applications must allow all printable ASCII characters, including spaces, and should accept all UNICODE characters, too, including emoji!

Therefore, this issue wants to track all the improvements being made to our DAF's password policies.

gvarisco commented 6 years ago

@acherici @giux78 @gruggiero please make sure we have this aligned as well on FreeIPA. More on this: https://www.freeipa.org/page/V2/Group_Password_Policy