Re: Isn't it a security hole...

[Rob Browning <osiris@cs.utexas.edu>]

Casper BodenCummins <bodec@Sherwood.co.uk> writes:

> Fewer than that. The range of ASCII characters used in passwords is
> quite small: perhaps ~= 110, optimisticly taking into account control
> characters and punctuation marks. Then, many people don't use the full 8
> characters, so we have to reduce the _average_ number again. I'd
> >tentatively suggest 6 characters.

It's too bad we can't support longer passwords.  Not only are longer
ones easier to remember sometimes, but they are harder to break.
Something along the lines of the PGP passphrase.

I'm sure there's some historical, or backward compatibility reason why
we can't...

--
Rob