[GH-ISSUE #19] validate passwords / secrets #17

New issue

Closed

opened 2026-02-26 09:34:54 +03:00 by kerem · 4 comments

kerem commented

2026-02-26 09:34:54 +03:00

Owner

Originally created by @ThomasWaldmann on GitHub (Oct 22, 2013).
Original GitHub issue: https://github.com/nsupdate-info/nsupdate.info/issues/19

ThomasWaldmann wrote:
minimum length, etc.

Originally created by @ThomasWaldmann on GitHub (Oct 22, 2013). Original GitHub issue: https://github.com/nsupdate-info/nsupdate.info/issues/19 ThomasWaldmann wrote: minimum length, etc.

kerem

2026-02-26 09:34:54 +03:00

closed this issue
added the
enhancement

security
labels

kerem commented

2026-02-26 09:34:54 +03:00

Author

Owner

@ThomasWaldmann commented on GitHub (Oct 22, 2013):

asmaps wrote:
will be no problem if they are autogenerated

@ThomasWaldmann commented on GitHub (Oct 22, 2013): asmaps wrote: will be no problem if they are autogenerated

kerem commented

2026-02-26 09:34:55 +03:00

Author

Owner

@ThomasWaldmann commented on GitHub (Oct 23, 2013):

only the update secret is autogenerated.

we could still do some minimal checks for the user login password.

@ThomasWaldmann commented on GitHub (Oct 23, 2013): only the update secret is autogenerated. we could still do some minimal checks for the user login password.

kerem commented

2026-02-26 09:34:55 +03:00

Author

Owner

@ThomasWaldmann commented on GitHub (Nov 2, 2013):

just enforcing some minimal length doesn't help much.

maybe just add some notes to the templates about how to choose a secure password?

@ThomasWaldmann commented on GitHub (Nov 2, 2013): just enforcing some minimal length doesn't help much. maybe just add some notes to the templates about how to choose a secure password?

kerem commented

2026-02-26 09:34:55 +03:00

Author

Owner

@ThomasWaldmann commented on GitHub (Nov 2, 2013):

regarding that dynamic dns users are usually advanced users, they should know the usual pw rules.

so we just let them use whatever login password they like.

@ThomasWaldmann commented on GitHub (Nov 2, 2013): regarding that dynamic dns users are usually advanced users, they should know the usual pw rules. so we just let them use whatever login password they like.