Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1p6DXO-00057E-Bz
	for pgsql-admin@arkaria.postgresql.org; Fri, 16 Dec 2022 16:26:18 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1p6DXN-0003V1-9Q
	for pgsql-admin@arkaria.postgresql.org; Fri, 16 Dec 2022 16:26:17 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <scott_ribe@elevated-dev.com>)
	id 1p6DXM-0003Us-VJ
	for pgsql-admin@lists.postgresql.org; Fri, 16 Dec 2022 16:26:16 +0000
Received: from mailout.easymail.ca ([64.68.200.34])
	by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <scott_ribe@elevated-dev.com>)
	id 1p6DXJ-00063E-GW
	for pgsql-admin@lists.postgresql.org; Fri, 16 Dec 2022 16:26:15 +0000
Received: from localhost (localhost [127.0.0.1])
	by mailout.easymail.ca (Postfix) with ESMTP id DFD8467632;
	Fri, 16 Dec 2022 16:26:11 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at emo07-pco.easydns.vpn
Received: from mailout.easymail.ca ([127.0.0.1])
	by localhost (emo07-pco.easydns.vpn [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id XoS0lpo-HnUu; Fri, 16 Dec 2022 16:26:09 +0000 (UTC)
Received: from smtpclient.apple (unknown [165.140.184.195])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mailout.easymail.ca (Postfix) with ESMTPSA id 08A82675CE;
	Fri, 16 Dec 2022 16:26:08 +0000 (UTC)
Content-Type: text/plain;
	charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.300.101.1.3\))
Subject: Re: Password complexities in Postgres v14.6
From: Scott Ribe <scott_ribe@elevated-dev.com>
In-Reply-To: <3682760.1671207449@sss.pgh.pa.us>
Date: Fri, 16 Dec 2022 09:25:57 -0700
Cc: Magnus Hagander <magnus@hagander.net>,
 Laurenz Albe <laurenz.albe@cybertec.at>,
 Daulat <daulat.dba@gmail.com>,
 pgsql-admin <pgsql-admin@lists.postgresql.org>
Content-Transfer-Encoding: 7bit
Message-Id: <B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9@elevated-dev.com>
References: 
 <CALfOM6LjVBhpHg+6nVe6reOBYdPJZXvXhkp+dqquG9cVBsGPmQ@mail.gmail.com>
 <2192ed923b577ce4a8a90479c7ed1c97f7a6523d.camel@cybertec.at>
 <3675887.1671203806@sss.pgh.pa.us>
 <CABUevExd8w-o1_SAbc3-1kRKbGFJP2S_86jvVFpqbWr_VPfVYA@mail.gmail.com>
 <3682760.1671207449@sss.pgh.pa.us>
To: Tom Lane <tgl@sss.pgh.pa.us>
X-Mailer: Apple Mail (2.3731.300.101.1.3)
List-Id: <pgsql-admin.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-admin@lists.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-admin>
Archived-At: 
 <https://www.postgresql.org/message-id/B5EB213A-CE37-44E0-BCB3-9456C1D8FDE9%40elevated-dev.com>
Precedence: bulk

> On Dec 16, 2022, at 9:17 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> 
> ...

> (I agree that forced password rotations are also an obsolete security
> practice, but figured that one bit of push-back at a time was enough.)

I believe that NIST is now on board with this opinion, aren't they?