Timeline for How does changing your password every 90 days increase security?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 23, 2011 at 11:13 | comment | added | DKGasser | There are way too many scenarios to get into, and it's impossible to speak of all of them, but needless to say it is not useful/necessary to have password changes in ALL cases.. that being said, it does have use in some cases. | |
| Jun 23, 2011 at 6:23 | comment | added | this.josh | 1) For inactive accounts, why not disable the account after 90 days of innactivity? It should be easy to tell if the account is not being used. 2) Whats the best case for locking out an attacker? reduction of access to hours, minutes? How long does it take an attacker to acquire value from the compromised account? | |
| Jun 22, 2011 at 20:11 | history | edited | DKGasser | CC BY-SA 3.0 |
added 84 characters in body
|
| Jun 22, 2011 at 18:18 | history | answered | DKGasser | CC BY-SA 3.0 |