[Catalog-sig] PyPI password policy

[Donald Stufft]

On Monday, February 18, 2013 at 2:07 PM, Yuval Greenfield wrote:
> I'm guessing https://bitbucket.org/loewis/pypi/ isn't up to date because I can't find the following error though it does hit me:
> 
> > Please use a mix of different-case letters and numbers in your password.
> 
> Some prefer extremely long lowercase passwords.
If your password was extremely long you wouldn't have gotten that error. It only occurs if your password is less than 16 characters in length. 

https://bitbucket.org/loewis/pypi/src/1f8cf2355c2f0d9745579e66d6ab6109eee990bd/webui.py?at=default#cl-2885
> 
> http://xkcd.com/936/
> 
> I think the only limit on passwords should be minimum length. And maybe, though not a must - disallow len(set(password)) == 1.
> 
> What say yee? 
> 
> 
> Yuval Greenfield 
> _______________________________________________
> Catalog-SIG mailing list
> Catalog-SIG at python.org (mailto:Catalog-SIG at python.org)
> http://mail.python.org/mailman/listinfo/catalog-sig
> 
> 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130218/84286651/attachment.html>