|
![](/i/fill.gif) |
scott wrote:
> You try coming up with a different strong password every month, *and*
> remembering it without writing it down.
...I do this every month?
I mean, I guess it depends on how strong you consider to be "strong".
> I wonder if
> security would actually be improved by removing the 1 month expiry.
Perhaps making the expiry a little longer would help.
The idea of course is that the faster the password expires, the less
time a potential attacker has to try to crack your password. (And just
in case an attacker does eventually get your password, changing it puts
them back to square one.)
So I guess it's just a question of how long is "long enough".
--
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*
Post a reply to this message
|
![](/i/fill.gif) |