3 messages in net.sourceforge.lists.courier-sqwebmail[sqwebmail] Minimum length of a new p...
FromSent OnAttachments
Pawel TeczaApr 26, 2006 4:29 am.gz
Sam VarshavchikMay 2, 2006 7:25 pm 
Pawel TeczaMay 4, 2006 12:44 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[sqwebmail] Minimum length of a new passwordActions...
From:Pawel Tecza (p.te@net.icm.edu.pl)
Date:Apr 26, 2006 4:29:25 am
List:net.sourceforge.lists.courier-sqwebmail
Attachments:
minpasslen.diff.gz - 6k

Hello Sam,

What do you think about checking length of new password? At this moment you don't do it, so a user can set even 1 character length password. I think it's not secure for him.

Could you please look at my patch? I added --with-minpasslen=<len> configure option which sets minimum length of a password in config.h file (#define MINPASSLEN <len>). Of course, this option is not obligatory, because default value of MINPASSLEN is 1.

BTW, why goodpass() function is disabled in pref.c file? In my opinion it can be useful if we want to limit allowed characters in user's password.

My best regards,

Pawel Tecza