11

Forgotten password was sending the password in plain text to email.

Comments
  • 0
    Define "plain text".
  • 0
    @Linux just the password, not sending a link for you to reset it.
  • 1
    @Afrohacker
    Wrong.
    The email is encrypted during transport.
  • 0
    @Linux still not safe, anyone with access to your pc or passing by can see your password
  • 1
    @Afrohacker
    Well, dont give them access? Dont ask for password reset on a machine that other people have access to? Set a smaller font on your screen?
  • 3
    A password should never be able to be seen as plain text because it SHOULD. BE. STORED. ALREADY. ENCRYPTED. INSIDE. THE. DATABASE. DAMNIT!
  • 0
    @fun2code
    I agree to that, by using the term "plain text" is wrong in this case.
  • 0
    @fun2code just checked the difference between hashing and encrypting and yes I meant hashing because it is irreversible
Add Comment