Authentication Cheat Sheet
"Applications should enforce password complexity rules to discourage easy to guess passwords." - ARGH!To clarify, to avoid downvotes for a non-'productive' comment, I firmly disagree since this will probably result in me having to pick a password that's harder to remember than I otherwise would. It might also might it more awkward to type quickly, making shoulder-surfing easier.(Note that this is probably not i18n-friendly, either)