On Wed, 22 Jun 2005, Scott Kitterman wrote:
It would be interesting to know if they make any use of exp strings. That
might be another way to deal with the issue.
That might help with bogus FAIL. But doesn't help with all the phishing
schemes that can now deceive hotmail users with a bogus PASS. Microsoft
is essentially threatening banks, paypay, etc with a Microsoft sponsored
increase in phishing fraud for hotmail customers unless they immediately
publish PRA records. That's one way to build deployment - and a good
fit for Microsoft.
--
Stuart D. Gathman <stuart(_at_)bmsi(_dot_)com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.