Sometimes after successful registration I receive an unencrypted e-mail that contain my login and my password in plain text. What's the point in securing the registration form if, a moment later, the credentials are being exposed badly, potentially giving access to the account?
What's more, if someone unluckily broke into my e-mail account he would get an extra gift - passwords to my other accounts.
As a result, my level of trust drops significantly. How do I know that they don't store my password in plain text? Hashing of passwords is such a basic thing...
Advice: Do not send passwords via (unencrypted) e-mail. Account activation link is enough.
Observed at: www.mojwzrok.pl and many other places...
Showing posts with label hashing passwords. Show all posts
Showing posts with label hashing passwords. Show all posts
Saturday, August 20, 2011
Subscribe to:
Posts (Atom)