cathaypacific.com policy

[TheTimewaster]

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• The top-level JSON objects are sorted alphabetically
• There are no open pull requests for the same update

for password-rules.json

• The given rule isn't particularly standard and obvious for password managers
• Generated passwords have been tested from this rule using the Password Rules Validation Tool
• Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

[rmondello]

I think the best rule for this website is:

"password-rules": "minlength: 8; maxlength: 20; required: upper; required: digit; required: [!#$*^]; allowed: lower;"

@TheTimewaster What do you think?

[TheTimewaster]

@rmondello You are totally right. It double checked it and looks correct now.

[rmondello]

Your rule says "require one of upper or digit", but I think you want, "require one upper. require one digit".

minlength: 8; maxlength: 20; required: upper; required: digit; required: [!#$*^]; allowed: lower;

[TheTimewaster]

Alright. Thanks for pointing out. I changed it accordingly.

[rmondello]

Thank you so much, @TheTimewaster!