OK, the existing validation code is less strict (@joey *except* for
canonical employees who have stricter requirements). Essentially:

        Validation is successful if:
            - password contains at least 8 characters
            - password contains only ascii characters

This has been the case since 2012-12-19, it's just that the report had
remained open since then.

I don't think requiring at least 8 chars is unreasonable, and that's
currently the only "attempt" to force the password to contain more
information". I think this solves the initial request so I'll close this
report.

** Changed in: canonical-identity-provider
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/821727

Title:
  Remove "strong" password requirements

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-identity-provider/+bug/821727/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to