My team is trying to meet new password security requirements passed down to us. One of which is preventing dictionary passwords. My idea is to use Lucene (actually, Compass, which is Spring compatible) to check the user's new password against a password table. Has anyone done anything like this? Or have you come up with a better way to prevent dictionary-based ...