If they don't making typing mistakes in the first place, then why are  
you emailing them their password?

On Jan 8, 2008, at 5:50 AM, Adrian Howard wrote:

> If your target audience is developers than I can almost guarantee
> that they'll complain if you e-mail them their password because:
> a) e-mail is an insecure transport mechanism for passwords
> b) it shows that you're storing the password in plain text rather
> than a password hash, which means that evil folk who hack your
> database can find out the passwords for everybody


Cheers!

Todd Zaki Warfel
President, Design Researcher
Messagefirst | Designing Information. Beautifully.
----------------------------------
Contact Info
Voice:  (215) 825-7423
Email:  [EMAIL PROTECTED]
AIM:    [EMAIL PROTECTED]
Blog:   http://toddwarfel.com
----------------------------------
In theory, theory and practice are the same.
In practice, they are not.

________________________________________________________________
*Come to IxDA Interaction08 | Savannah*
February 8-10, 2008 in Savannah, GA, USA
Register today: http://interaction08.ixda.org/

________________________________________________________________
Welcome to the Interaction Design Association (IxDA)!
To post to this list ....... [EMAIL PROTECTED]
Unsubscribe ................ http://www.ixda.org/unsubscribe
List Guidelines ............ http://www.ixda.org/guidelines
List Help .................. http://www.ixda.org/help

Reply via email to