Passwords: does size matter, what characters?

[Drew Van Zandt]

> up to checking against a dictionary lookup.
>
I'd just go straight to dictionary lookup - that way people like me
can use sane-but-secure passwords.  I know many places that do
dictionary lookup also check the hash against hashes of all previous
passwords so they can't re-use... I'm of divided opinion about that,
as collisions tells you someone else may be using it as their
password.

--DTVZ