Hi Chris,
Did you base your new policy on
https://pages.nist.gov/800-63-3/sp800-63b.html#memsecret ? I didn't see
any reference to it. You might want to check it out and reference it.
Maarten
On 06-12-18 20:34, Chris Koerner wrote:
The Wikimedia Foundation security team is implementing
a new password
policy and requirements. [0] You can learn more about the project on
MediaWiki.org. [1]
These new requirements will apply to new accounts and privileged
accounts. New accounts will be required to create a password with a
minimum length of 8 characters. Privileged accounts will be prompted
to update their password to one that is at least 10 characters in
length.
These changes are planned to be in effect on December 13th. If you
think your work or tools will be affected by this change, please let
us know on the talk page. [2]
[0]
https://meta.wikimedia.org/wiki/Password_policy
[1]
https://www.mediawiki.org/wiki/Wikimedia_Security_Team/Password_strengtheni…
[2]
https://www.mediawiki.org/wiki/Talk:Wikimedia_Security_Team/Password_streng…
Yours,
Chris Koerner
Community Relations Specialist
Wikimedia Foundation
_______________________________________________
Wikitech-l mailing list
Wikitech-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l