[jira] [Commented] (OFBIZ-4958) Additional Validation for Password : Make password pattern driven

["Scott Gray (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OFBIZ-4958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13429106#comment-13429106 ] 

Scott Gray commented on OFBIZ-4958:
-----------------------------------

Please keep the default to something less restrictive.  I use pass phrases in place of passwords which are easier to remember and arguably more secure (http://en.wikipedia.org/wiki/Passphrase#Compared_to_passwords).  Pass phrases become much harder to remember if you force them to contain numbers or special characters.
                
> Additional Validation for Password  : Make password pattern driven
> ------------------------------------------------------------------
>
>                 Key: OFBIZ-4958
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-4958
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: ALL COMPONENTS
>    Affects Versions: SVN trunk
>            Reporter: Sumit Pandit
>            Assignee: Jacques Le Roux
>             Fix For: SVN trunk
>
>         Attachments: OFBIZ-4958.patch
>
>
> Providing an additional validation for password  -
> Idea is to achieve following -
> * Insist user to provide a stronger login password for additional protection.
> * User's password need to match a pre-defined Pattern.
> * Password pattern can change any time.
> * Validation should applied for new user creation and update password processes.
> --
> Thanks And Regards
> Sumit Pandit

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira