On Fri, 04 Jul 2008 14:21:48 +0200, scott wrote:
>>> Especially when some stupid system forces you to change it every
>>> month.
>>
>> ...and this is bad because...?
>
> You try coming up with a different strong password every month, *and*
> remembering it without writing it down. I doubt I'm the only user of
> this system who needs to write the password somewhere. I wonder if
> security would actually be improved by removing the 1 month expiry.
There have been studies done that suggest that changes that are too
frequent reduce security for just this reason.
Jim
Post a reply to this message
|