It's not a standard that can fix this problem, it's education, both between end users and developers.
One could devise a system that allows any password as long as the entropy threshold is satisfied.
The only limitation to passwords should be a minimum level of entropy (or at least length, to keep things simple) furthered by taking into account character sets, lists, etc...
Some people prefer only digits, other like sentences, while some are used to the systems currently in place at the moment with multiple custom rules.
Comments
NO, no no no, and No!
http://stackoverflow.com/questions/15753279/password-validat...
It's not a standard that can fix this problem, it's education, both between end users and developers.
One could devise a system that allows any password as long as the entropy threshold is satisfied.
The only limitation to passwords should be a minimum level of entropy (or at least length, to keep things simple) furthered by taking into account character sets, lists, etc...
Some people prefer only digits, other like sentences, while some are used to the systems currently in place at the moment with multiple custom rules.
Food for thought.