downtown_

8 ms·

1. 1.▲
   by downtown_ 1y ago

   This is not related to password hashing.,.
2. 2.▲
   by downtown_ 6y ago

   You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.
3. 3.▲
   by downtown_ 6y ago

   You are allowed to use the NIST Guidance as a reason to change that to a longer timeframe. I have a couple of clients that are using 365days as of 2019.
4. 4.▲
   by downtown_ 7y ago

   https://github.com/usdAG/cstc this implements This as a burp plugin. A few Colleagues developed this and released it two weeks ago at defcon
5. 5.▲
   by downtown_ 7y ago

   No. You can use NIST guidance and are not required to change your password every 90 days
6. 6.▲
   by downtown_ 8y ago

   No. You are free to reference nist and use a compensating control for that. No more pw changes :) Source: QSA