4 ms·
Not sure how it shortens my signup, but interesting point re: the "share" feature. At first glance made me think "oh I hope they're not storing passwords in pla
by kylebragger 17y ago
Not sure how it shortens my signup, but interesting point re: the "share" feature. At first glance made me think "oh I hope they're not storing passwords in plaintext".
- nickmolnar2 17y agoDon't worry. We aren't storing anything in plaintext. SHA-1 with a 256-bit salt. Sorry, I was a little confused about the password-via-email comment. No, it doesn't shorten your reg. Only the share. We include the password for easy record-keeping for users. Also, we don't keep anything of value on JTB. It is just receipts. No bank account numbers or CC numbers. Just like a paper receipt.
- kylebragger 17y agoAwesome, thanks for the clarification.
- cliff 17y agoYou're still sending the password I entered back to me in an email in plaintext, even if you're not keeping it. This is considered horrible practice. I was excited about your product until I received an email with my password in it.. it just killed my enthusiasm. At some point I'll look back, but for a site that stores financial data...kinda scary.