Enforcing Crytographically Strong Passwords

Saqib Ali writes "The WebAppSec mailing list at SecurityFocus is currently having an interesting discussion on how to force users to use cryptographically strong passwords. The original poster suggested displaying a list of randomly generated password for the user to choose from. Two issues pointed with this concept, were Shoulder surfing and the fact that a bunch of randomly generated passwords are hard to remember. A counter proposal was to use pronounceable but randomly generated password. A full summary of this discussion is available. Any thoughts from slashdotters?"

Comments

Re:Easier to remember random passwords

[Infinityis]

Unless "fat" has four to six characters, I call BS on this story.

Remember kids, funny doesn't add to your karma, especially when the joke has errors that weren't caught at compile time...

Re:Easier to remember random passwords

[Anonymous Coward]

Note the parent is modded "off topic". Now that's even funnier than the parent!