g0> So my question/challenge is: If I am going to make them case sensitive
 g0> which I think they should be, how do I handle converting existing
 g0> passwords? My guess is that I should convert them all to lowercased
 g0> letters because I assume thats how most people typed their passwords in
 g0> the past. 

Can you not convert them "as-is?" If someone has created a
password in the past
with CaSe.SeNsItIvE even though it never took in the past.. Converting them
as-is would at least make it work in the future.. Or is this not an option?

 g0> Or do I just leave the passwords case insensitive but still add in all of
 g0> the rest of the ideas?

The more secure, the better. If there's no option to convert as-is, then I
guess convert them all to lowercase.

Regards,
Nick
--- SBBSecho 2.27-Linux