View Issue Details

IDProjectCategoryView StatusLast Update
0009356Talerlibeufin-bankpublic2026-08-29 19:08
ReporterAntoine A Assigned ToResolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeverityminorReproducibilityN/A
Status acknowledgedResolutionopen 
Product Versionpost-1.0 
Target Versionpost-1.0 
Summary0009356: Check passwords against a blocklist
DescriptionNIST 800-63B recommends that :
passwords chosen by users should be compared against a blocklist of unacceptable passwords. This list should include
passwords from previous breach corpuses, dictionary words used as passwords, and specific words (e.g., the name of
the service itself) that users are likely to choose
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Antoine A

2024-11-26 16:34

manager   ~0023754

Pending further discussion on whether and how we want to implement this measure

Issue History

Date ModifiedUsernameFieldChange
2024-11-26 16:33Antoine ANew Issue
2024-11-26 16:33Antoine AStatusnew => assigned
2024-11-26 16:33Antoine AAssigned To => Antoine A
2024-11-26 16:34Antoine AStatusassigned => feedback
2024-11-26 16:34Antoine ANote Added: 0023754
2025-05-08 20:35Christian GrothoffAssigned ToAntoine A =>
2025-05-08 20:35Christian GrothoffStatusfeedback => acknowledged
2026-08-29 19:08Florian DoldTarget Version => post-1.0