On 07/05/07, Blu Aardvark jeffrey.latham@gmail.com wrote:
In addition, it should be entirely disallowed for a user to create a password containing the string "password" or that is identical to their username.
I agree entirely, except I think, for longer usernames at least, it should not *contain* their username. But that sorta gets stuffed up when people have like [[User:A]]. :-\
~Mark Ryan