[Discussion] Dealing with or-conditions in password rules

Some websites require, for example, one digit OR one special character. While it seems to be possible to create password rules with an or-condition (see [this article](https://developer.apple.com/documentation/security/password_autofill/customizing_password_autofill_rules)) I'm wondering whether we should do this or whether we should just require both things.

Or to put it another way, when a website accepts, for example, digits and characters, wouldn't be it beneficial in terms of security when we make password managers use digits and characters instead of only one of them?

No files, tests, or entry points are named. Start by reviewing the linked Apple password rule documentation and the discussion about whether OR conditions should be supported or replaced with stricter requirements. Done would require an agreed project direction before implementation can be scoped.

Written by the indexing model from the issue text.