Putting xor logic in there sounds like the software engineer was just trying to fuck with end users or hated whoever was writing requirements. Like in every language, or means one, the other, or both.

[–] Successful_Try543 1 points 2 months ago* (last edited 2 months ago) (1 children)

Do you like a cup of coffee or tea? :-p
I also can't think of a scenario where that makes technically sense to limit the choice of passwords in that way.
As far as I remember, it was for Deutsche Telekom De-Mail, a specially secure authenticated e-mail service which was discontinued some years ago.

[–] alcoholicorn@lemmy.ml 2 points 2 months ago (1 children)

*every software language

[–] Successful_Try543 1 points 2 months ago* (last edited 2 months ago)

Yes, of course you are right.
I was thinking of the text on the web page, like the one in the OP, stating the requirements for the password to the end user: "The password must contain at least one digit or special character." So several digits were allowed, also one or more special character, but not mixing digits and special characters.