Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Require min of n characters for passwords #39

Closed
hueniverse opened this issue Jan 6, 2016 · 2 comments
Closed

Require min of n characters for passwords #39

hueniverse opened this issue Jan 6, 2016 · 2 comments
Assignees
@hueniverse
Labels
breaking changes Change that can breaking existing code security Issue with security impact
Milestone
4.0.0

Comments

@hueniverse
Copy link
Contributor

@tomsteele can you find a recommended length
@hueniverse hueniverse added the security Issue with security impact label Jan 6, 2016
@hueniverse hueniverse mentioned this issue Jan 6, 2016
Closed
@tomsteele
Copy link
Contributor

I can't find a standard, but brakeman, a widely used Rails source analysis tool will warn if the secret token is less than 30 characters long http://brakemanscanner.org/docs/warning_types/session_setting/. I say we set it to 32.

@hueniverse hueniverse self-assigned this Jan 7, 2016
@hueniverse hueniverse added the breaking changes Change that can breaking existing code label Feb 1, 2016
@hueniverse hueniverse added this to the 3.0.2 milestone Feb 1, 2016
@maxbeatty maxbeatty mentioned this issue Jul 20, 2016
Merged
@lock
Copy link

lock bot commented Jan 9, 2020

This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions.

@lock lock bot locked as resolved and limited conversation to collaborators Jan 9, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@hueniverse hueniverse

Labels
breaking changes Change that can breaking existing code security Issue with security impact
Projects
None yet
Milestone
4.0.0
Development

No branches or pull requests
2 participants
@hueniverse @tomsteele