Nick Humphries

"Show me how any particular site giving users the option of using a strong password is not beneficial. Key word, optional. What I am saying in the post is that a lot of sites that handle sensitive information don't have enough security options for users who care enough about the security of their information. Obviously different people have different needs, which is why I stress that these security options should be optional for the user. I don't care about the minimum length requirements of passwords— some people don't want to be burdened, I get that. But limiting the maximum length requirement of passwords has nothing to do with burdening people or policies. Registrants should be free to choose how long or how short their passwords are, and optionally, free to choose additional security measures such as OpenID or a security key." - Nick Humphries