548
NIST proposes barring some of the most nonsensical password rules
(arstechnica.com)
This is a most excellent place for technology news and articles.
That's fair, not sure why they'd go through that much effort when DOM attributes exist.