I second that. Email is the 'postcard' of the internet world. I wouldn't send plain text password through email(s) even while running HTTPS web based email services.
On Sat, May 7, 2011 at 11:27 AM, Andy McKay <a...@clearwind.ca> wrote: > > On 2011-05-05, at 9:36 PM, Phui-Hock wrote: > > On May 6, 4:22 am, Shawn Milochik <sh...@milochik.com> wrote: > > This is a bad idea for multiple reasons. Don't do it. > > > Huh, care to explain, please? > > > Because it means you are storing passwords in plain text. There are > multiple posts on the internet about this. Here's a couple: > > > http://blog.moertel.com/articles/2006/12/15/never-store-passwords-in-a-database > > http://www.codinghorror.com/blog/2007/09/youre-probably-storing-passwords-incorrectly.html > > > <http://www.codinghorror.com/blog/2007/09/youre-probably-storing-passwords-incorrectly.html> > -- > Andy McKay > a...@clearwind.ca > twitter: @andymckay > > > -- > You received this message because you are subscribed to the Google Groups > "Django users" group. > To post to this group, send email to django-users@googlegroups.com. > To unsubscribe from this group, send email to > django-users+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/django-users?hl=en. > -- AJ -- You received this message because you are subscribed to the Google Groups "Django users" group. To post to this group, send email to django-users@googlegroups.com. To unsubscribe from this group, send email to django-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/django-users?hl=en.
