Re: Expire or not expire?


"Ben M. Schorr, MVP" <bens@xxxxxxxxxxxxxxxx> wrote in message news:3851CEA8-1D67-4FD7-8AD3-DB9B178C92F3@xxxxxxxxxxxxxxxx
We also set the lockout policy so that an intruder could only brute force attempt about 100 passwords in an hour. By the time an intruder successfully brute forced a 15+ character passphrase at the rate of 100 attempts per hour the user whose account they were attacking will have long since retired. Not to mention the fact that the admins would pretty quickly notice that many failed login attempts in the log.

Not to mention how many terabytes of bandwidth it would take to break something 8+ chars.

--
Mark Randall
http://www.awportals.com

.