Re: Password Reset

[Mike McGrath <mmcgrath redhat com>]

On Wed, 11 Mar 2009, Mike McGrath wrote:

> On Wed, 11 Mar 2009, Tom Lane wrote:
>
> > Jon Masters <jcm redhat com> writes:
> > > On Tue, 2009-03-10 at 22:17 -0500, Mike McGrath wrote:
> > >> Is 4 weeks enough with 5 total emails?  4 week warning, 3 week, 2 week, 1
> > >> week, you've been disabled?
> >
> > > I think a month is reasonable. A week is easy to miss, two weeks is a
> > > week plus someone getting back from vacation and missing emails while
> > > they were gone, then drowning as they try to catch up.
> >
> > Month-long summer vacation is, or at least used to be, common in Europe.
> > And what of situations that are even a bit unusual, like someone getting
> > hurt and being in hospital for a month or two?
> >
>
> Two months of notice means you'll be asked to reset your password every 4
> months if you stay on top of things.  Is that acceptable?
>

Actually if we push password resets back to 8 months with a 2 month leway,
that's still no more then notifications every 6 months.

	-Mike