On Sat, Jan 25, 2014 at 10:25 AM, Isarra Yos zhorishna@gmail.com wrote:
On 25/01/14 13:02, rupert THURNER wrote:
for the password policy: display a strength indicator is great. anything more? i would say just leave it to the user.
rupert.
This.
We should probably have this discussion on the RFC comments. The trade-off between security and user freedom is already brought up there, and there are some clarifying comments that are relevant. Namely, that the RFC is about the MediaWiki default. If a given MediWiki install wants to change the default, they can like all config settings.