RE: Sourceforge sending out passwords in the clear (forwarded message from Barry A. Warsaw)

[barry () zope com (Barry A. Warsaw)]

> > > > > "BAW" == Barry A Warsaw <barry () python org> writes:

> > > > > "PDR" == Paul D Robertson <proberts () patriot net> writes:

    PDR> If the Web or mail command allows a password fetch, wouldn't
    PDR> a link to the password fetching page be better than sending
    PDR> the actual password?

    BAW> Perhaps.  It's an interesting idea.

Of course, I just realized that the password reminder /does/ include a
link to the page with the Remind button.  So all the monthly reminder
would have to do is suppress the actual password.  I'd probably do
this as a per-user option, i.e. "No" (don't send), "Yes" (send), "Yes,
but obscure" (send the reminder but without the password).

-Barry
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards