Update github.com

[parkerbxyz]

Updates and simplifies the password rules for github.com.

Disclaimer: I work for GitHub.

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• The top-level JSON objects are sorted alphabetically
• There are no open pull requests for the same update

for password-rules.json

• The given rule isn't particularly standard and obvious for password managers
• Generated passwords have been tested from this rule using the Password Rules Validation Tool
• Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

[rmondello]

Disclaimer: I work for GitHub.

Thanks for that!

Are you interested in applying the rule to text fields themselves using the passwordRules attribute, such that GitHub itself “owns" the policy?

The README of this project says:

If a website changes its password requirements to be general enough to not warrant quirks, or if it adopts the passwordRules attribute to accurately communicate its requirements to password managers and web browsers, it should be removed from this list.

[parkerbxyz]

Ah! I missed that in the README; thanks for bringing it to my attention. I do think that would be a better approach. I’ll take a crack at it.

Would you like to merge this in the meantime or would you rather wait? I’d be happy to open a new PR to remove github.com from this list once the rules are applied directly to the text fields.

[rmondello]

Merged. @parkerbxyz, please do come back once github.com is updated. :-)