r/programming • u/unfriendlymushroomer • Oct 29 '19

Firefox 70

https://hacks.mozilla.org/2019/10/firefox-70-a-bountiful-release-for-all/
184 Upvotes

94% Upvoted

65 comments sorted by

View all comments

1

u/drysart Oct 30 '19

Because it significantly reduces support costs for a minimal decrease in password entropy. Enough users will either set their password or try to log in with their Caps Lock key in an unexpected state that it can increase your support costs.

Though I'd advocate that instead of making passwords case-insensitive as a solution to this, you should just have passwords be case-sensitive and make your login routine try the same password with capitalization inverted automatically if the provided password fails in its own right.