undefined | Better HN

0 pointsPeterisP4y ago0 comments

That's why it's relevant that the NIST US government standards have changed in the last few years, and government agencies who are still requiring password rotation are not compliant and will have to remove that requirement.

0 comments

tempnow9874y ago

That's the issue, not from what I've seen for some reason. Even recently the IRS was making life harder with tighter rotation periods.

But yes, that is the hope. I did push back somewhat on a local city system that went down this rediculous path (blocked password managers, hand type password only, crazy complexity requirements and rotation for a low risk system - think looking up a water bill).

j / k navigate · click thread line to collapse

0 pointsPeterisP4y ago0 comments

0 comments

tempnow9874y ago

That's the issue, not from what I've seen for some reason. Even recently the IRS was making life harder with tighter rotation periods.

j / k navigate · click thread line to collapse