Hacker News new | ask | show | jobs
by kube-system 2396 days ago
It’s not research, but I would point them at NIST 800-63. These are well thought out standards that the entire US government follows. It would be tough to find a more comprehensive or authoritative source that says otherwise.

https://www.nist.gov/itl/tig/projects/special-publication-80...