Since 2017 NIST have been against expiring passwords automatically and only doing so when you suspect there is a breach.
I’ve seen a tonne of LinkedIn posts recently boasting the above as if it’s something new that we should all be aware of?
So what has changed specifically in relation to this?
[link] [comments]