“More than half of the websites in the study accepted passwords with six characters or less, with 75% failing to require the recommended eight-character minimum. Around 12% of had no length requirements, and 30% did not support spaces or special characters.”
I think battle.net did this for a long time. I am probably misremembering but gosh whatever service I experienced it with was annoying