From info at arin.net Tue Oct 9 14:48:30 2018 From: info at arin.net (ARIN) Date: Tue, 9 Oct 2018 14:48:30 -0400 Subject: [ARIN-Suggestions] New ACSP 2018.22: Align ARIN password policy with current NIST SP800-63 recommendations Message-ID: On 6 October, we received a new suggestion, numbered 2018.22 upon confirmed receipt. https://www.arin.net/participate/acsp/suggestions/2018-22.html Description: Align ARIN password policy with current NIST SP800-63 recommendations (published June 2017) Executive summary at https://www.nist.gov/blogs/taking-measure/easy-ways-build-better-p5w0rd TL;DR - a long passphrase with no special characters or capitalization is far more secure than a p4SSw0rD&!! Value to Community: Improved security. This suggestion is currently being reviewed, and we will issue our response as soon as it is available. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) From info at arin.net Fri Oct 19 15:21:07 2018 From: info at arin.net (ARIN) Date: Fri, 19 Oct 2018 15:21:07 -0400 Subject: [ARIN-Suggestions] Response to ACSP 2018.22: Align ARIN password policy with current NIST SP800-63 recommendations Message-ID: On 18 October we issued our response to the submitter of ACSP 2018.22: Align ARIN password policy with current NIST SP800-63 recommendations. The full text of the suggestion is available at: https://www.arin.net/participate/acsp/suggestions/2018-22.html Response: Thank you for your suggestion, numbered 2018.22 upon confirmed receipt, requesting alignment of ARIN password policy with current NIST SP800-63 recommendations, as published in June 2017. We agree with your suggestion and will make this change to our systems. Our development schedule for the 2018 year is currently filled by previously submitted community suggestions and other system improvements. We will consider this suggestion, together with other community suggestions requesting enhancements to ARIN Online, for possible inclusion into our 2019 work plan. Thank you for participating in the ARIN Consultation and Suggestion Process. Your suggestion will remain open until implemented. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN)