OK, the existing validation code is less strict (@joey *except* for canonical employees who have stricter requirements). Essentially:
Validation is successful if:
- password contains at least 8 characters
- password contains only ascii characters
This has been the case since 2012-12-19, it's just that the report had remained open since then.
I don't think requiring at least 8 chars is unreasonable, and that's currently the only "attempt" to force the password to contain more information". I think this solves the initial request so I'll close this report.
OK, the existing validation code is less strict (@joey *except* for canonical employees who have stricter requirements). Essentially:
Validation is successful if:
- password contains at least 8 characters
- password contains only ascii characters
This has been the case since 2012-12-19, it's just that the report had remained open since then.
I don't think requiring at least 8 chars is unreasonable, and that's currently the only "attempt" to force the password to contain more information". I think this solves the initial request so I'll close this report.