This policy needs to change posthaste--yesterday, if not sooner!
I would rather know that my password is not stored anywhere in plain text, and that it could only be reset, not resent!
I do NOT want my password sent to me...ever! Whomever has set the system up this way should be rather ashamed. This is exactly why a few years ago the site had a major issue with a hacking event that compromised everyone's passwords. It sounds, by this "policy" talk, as if no lesson was learned at all!
I'm a simple monk, with inferior coding skills by comparison with most here--yet even I do not store anyone's password in plain text on my servers. Tools like crypt are super easy to use, and waaaaaay more secure than plain text!
Blessings,
~Polyglot~
In reply to Re: RFC: Add profile field "emergency contact" or such like as
by Polyglot
in thread RFC: Add profile field "emergency contact" or such like as
by jdporter
For: | Use: | ||
& | & | ||
< | < | ||
> | > | ||
[ | [ | ||
] | ] |