Comment

Comment by MonstraG

Yea, I think they (proton) just didn't properly read (misunderstood) the guidelines.

> 3.1.1.2 Password Verifiers

> ...

> 2. Verifiers and CSPs SHOULD permit a maximum password length of at least 64 characters.

In other words, if you want to put a max length, don't put 20, put at least 64.

parent MonstraG 1 year ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton