I just received my hogranch.com mailing list memberships reminder (sent
monthly) for prime and was dismayed to be reminded of my password in clear.
This is an extremely bad practice, as it means that all the passwords are
stored on the hogranch.com server in clear.

As any system administrator (I am not one) should know, the password should
encoded at the client's end and there should be sent to the server that way.
If someone forgets their password, they should be mailed a temporary one
which they should have to change immediately.

The net is a dangerous place and this should be corrected as soon as
possible. At a minimum, stop sending out the monthly reminders starting
immediately.

Emile State

_______________________________________________
Prime mailing list
[EMAIL PROTECTED]
http://hogranch.com/mailman/listinfo/prime

Reply via email to