I got an email like this from my domain provider the other day. I was curious if someone might be able to sniff the network for SMTP messages then go request a

I got an email like this from my domain provider the other day. I was curious if someone might be able to sniff the network for SMTP messages then go request a bunch of password resets from the website. There support staff was not too interested in the idea.