Re: Password Reset

[Seth Vidal <skvidal fedoraproject org>]

On Wed, 11 Mar 2009, Mike McGrath wrote:

> On Wed, 11 Mar 2009, Mike McGrath wrote:
>
> > On Wed, 11 Mar 2009, Tom Lane wrote:
> >
> > > Jon Masters <jcm redhat com> writes:
> > > > On Tue, 2009-03-10 at 22:17 -0500, Mike McGrath wrote:
> > > > > Is 4 weeks enough with 5 total emails?  4 week warning, 3 week, 2 week, 1
> > > > > week, you've been disabled?
> > >
> > > > I think a month is reasonable. A week is easy to miss, two weeks is a
> > > > week plus someone getting back from vacation and missing emails while
> > > > they were gone, then drowning as they try to catch up.
> > >
> > > Month-long summer vacation is, or at least used to be, common in Europe.
> > > And what of situations that are even a bit unusual, like someone getting
> > > hurt and being in hospital for a month or two?
> >
> > Two months of notice means you'll be asked to reset your password every 4
> > months if you stay on top of things.  Is that acceptable?
>
> Actually if we push password resets back to 8 months with a 2 month leway,
> that's still no more then notifications every 6 months.

+1 to this.

changes every 8months with a 2month notice sounds good.

-sv