The design was then reviewed, and contributed to, by a number of other companies to arrive at the current PKCS-12 standard. This was done to provide a common, exportable solution that was completely interoperable. Examples of such bad passwords include words in the English dictionary. For example, performing a dictionary check on the password before accepting it for encrypting the data blob would reduce the use of weak passwords. However, neither of these methods are required for protection of the data blob.
Good security is always a combination of technology and policy.
As part of a strong security policy, strong passwords should be used on all resources. One statement by the original poster argues that Microsoft managed to design a security format that actually makes it easier to break into the protected data. As stated above, a number of well respected companies were involved extensively in the design and review of PKCS-12 before it became a standard. It was, however, too late to make it into the Internet Explorer 4 product release. Future versions of Internet Explorer will include support for the an iteration count, further strengthening the security of exported key material.