Yep, I know all of that stuff. I actually deal with the upper end of IT security IRL, so this was the reason for this post. In this case, the security recommendations don't matter if the password is sent in clear text across the wire. No amount of password requirements/length is going to...