On Sat, Jan 25, 2014 at 10:25 AM, Isarra Yos <zhorishna(a)gmail.com> wrote:
On 25/01/14 13:02, rupert THURNER wrote:
for the password policy: display a strength
indicator is great. anything
more? i would say just leave it to the user.
rupert.
This.
We should probably have this discussion on the RFC comments. The trade-off
between security and user freedom is already brought up there, and there
are some clarifying comments that are relevant. Namely, that the RFC is
about the MediaWiki default. If a given MediWiki install wants to change
the default, they can like all config settings.