Worse yet are sites which make better passwords difficult by imposing small maximum (yes, said maximum , not minimum) lengths or refuse common punctuation marks as invalid characters. I can't believe that is still being done.

Um they could. They don't. Just saying.