[Info-vax] Enhanced Password Management

[Phillip Helbig undress to reply]

In article <qcs6db$k9$1 at dont-email.me>, Stephen Hoffman
<seaohveh at hoffmanlabs.invalid> writes: 

> If a password is never 
> stolen, there's no need to expire it. And if you have 
> evidence that a 
> password has been stolen, you would presumably act immediately rather 
> than wait for expiration to fix the problem."

Right.  Also, people can remember a longer and more complex password if 
they don't have to change it.