-
-
Notifications
You must be signed in to change notification settings - Fork 397
Closed
Labels
Description
commafeed.users.strict-password-policy should be changed. None of the things it mandates are required for a secure password.
It should be changed to require a password to be atleast 8 characters long, with atleast 3 different character types. Meaning aaaaaaaa would not be allowed but abcccccc would be allowed.
This would be plenty powerful enough for the thread model of someones news feed. This will avoid annoying users to put a symbol or something into their password when they don't want one and when it's unnecessary.
DarkFox and skorokithakis