Re: Minimum password length

[PaulMmn <PaulMmn@xxxxxxxxxxxxx>]

I've probably missed the discussion, but -why- is an 8 character 
password no more secure than a 7?  "Common sense" would suggest that 
the more characters, the merrier.

--Paul E Musselman
PaulMmn@ix.netcom.nospam.com




> From: Booth Martin <Booth@MartinVT.com>
> >  In a perfect World I would salute you Leif
> >  What little damage I have seen occur in the iSeries world has come from
> >  people that already have the passwords, and are people with fairly high
> >  security levels.  128 character passphrases would not have prevented one
> >  single piece of damage I have ever seen.
> I actually agree with you here. 128-character passwords are ridiculous,
> my point was just that 8 characters long is not more secure than 7, and that
> IF you demanded more security you'll need to go to the new encryption
> method (that doesn't work with Windows). I did not say that I recommended
> that.
> For me, a well chosen 5, 6 or 7 character password is ok. *Requiring* 8 as a
> minimum is false security. If the 5, 6 or 7 character password can be broken,
> so can the 8, 9, and 10 character password. No need to *require" a longer
> password thinking that you are more secure.