tag:blogger.com,1999:blog-19505892882804206.post8833789514425838375..comments2022-04-11T04:52:17.198-07:00Comments on Abamacus: Universal Password Blacklistabamacushttp://www.blogger.com/profile/17460058315433467453noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-19505892882804206.post-75403242206756488512017-06-26T13:58:42.920-07:002017-06-26T13:58:42.920-07:00Hey, I win! From the new NIST recommendations (htt...Hey, I win! From the new NIST recommendations (https://pages.nist.gov/800-63-3/sp800-63b.html#memsecret),<br />"If the CSP or verifier disallows a chosen memorized secret based on its appearance on a blacklist of compromised values, the subscriber SHALL be required to choose a different memorized secret. No other complexity requirements for memorized secrets SHOULD be imposed."abamacushttps://www.blogger.com/profile/17460058315433467453noreply@blogger.com