Re: Password aging

[Scott Bradner <sob () HARVARD EDU>]

> I'm trying to get a sense on how many have a university-wide Password Policy

not here at Harvard (many many different systems)
just installed (today) a quite restrictive password checker on the
core university PIN system

> Second, do any have a password aging rule?

latest research I've seen (see for example the new edition of the
Bellovin firewalls book) says that forced password aging reduces
not increaces security - i.e. its a bad idea

Scott

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.