Hacker News Reader

I think he did this to show how even with a very restricted dictionary you could still build a relatively secure login system. Having a restricted dictionary could also help with the issues other people are discussing with humans being socially programmed to select certain word orders as their password under this scheme.

Typical vocabulary is smaller than that.

And pass phrases will tend away from words like perspicacious.

He's not assigning entropy per word. He's using NIST SP 800-63, based on the character-length of the phrase, to assign the entropy value.

Proof: https://news.ycombinator.com/item?id=7163362