bug or feature?

I just figured out that our web portal Galaxy, a uPortal in fact, and also our courseware WebCT both only use first eight characters of our passwords! This is interesting, since when choosing a password we are “forced” to use a password between 8 and 20, containing special characters and numbers.

Is it only me who thinks so, or is it kind of silly?