Page 1 of 1

Activation E-Mail.

Posted: Tue Dec 16, 2008 11:20 am
by UsF
I don't know if you agree with me or not, but personally I'd prefer it if my Username and Password wouldn't be located with plain text in my activation e-mail sent unencrypted etc. :? A forum-account ain't much, yea, but where to draw the line.
If I activate my account and forgot my password, I can always use the function to retrieve it.
Just a thought.

Re: Activation E-Mail.

Posted: Tue Dec 16, 2008 11:24 am
by nutcracker
Does wolfire have activation email? I cant remember

Re: Activation E-Mail.

Posted: Tue Dec 16, 2008 12:42 pm
by UsF
Yea it does, I just received one that contained my username and password. That's why I opened this thread. :)

Re: Activation E-Mail.

Posted: Tue Dec 16, 2008 1:26 pm
by nutcracker
Ur email is password protected, no one will see it. Its just wolfire forum Ftw, you just say that soembody stole it.

Re: Activation E-Mail.

Posted: Tue Dec 16, 2008 2:05 pm
by UsF
My e-mail might be password protected, but the e-mail is not encrypted, so the plain text is sent over the net during the transfer.

It's not that I think it is a huge leak or risk, but I think it can be an issue easily fixed or avoidable. If people keep their passwords and usernames written in plain text on their systems or e-mail accounts, they will write it down themselves anyway.

Re: Activation E-Mail.

Posted: Tue Dec 16, 2008 2:23 pm
by Hal1989
I don't write them down since I will eventually lose them, lol. Besides, since my usernames and passwords are practically the same, I delete the email anyway. I just keep licence keys or accounts that have a less generic name and password.

Re: Activation E-Mail.

Posted: Tue Dec 16, 2008 3:10 pm
by Jeff
I'll pass it on to the phpBB team and see if I can change it.