Episode 461 - The new NIST password guidance

Open Source Security

Josh and Kurt talk about new NIST password guidance. There's some really good stuff in this new document. Ideas like usability and equity show up (which is amazing). There's more strict guidance against rotating passwords and complex passwords. This new guidance gives us a lot to look forward to.

Show Notes

• Usagi Electric
• NIST proposes barring some of the most nonsensical password rules
• NIST SP 800-63(B)
• STRIDE threat model
• PASTA threat model