Wait, you're saying disallowing people to pick passwords that an attacker can crack in 17 seconds helps an attacker?
Yes. It is 17 seconds of work he doesn't have to do.
If don't have a length restriction, the majority of people will still use more than that and he has to look.
If you do have a length restriction, he no longer has to.
It's not much, but combine that with other restrictions and you are simply reducing the search space.
That's a logic I cannot phantom.
Sure you can.
In reply to Re^7: Password strength calculation
by BrowserUk
in thread Password strength calculation
by cavac
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |