39 ms·
I highly doubt the typical user with password "1234" is going to go through the trouble of using this service. They would most likely email the password direct
by gravitronic 15y ago
I highly doubt the typical user with password "1234" is going to go through the trouble of using this service. They would most likely email the password directly ("that's secure right?")
- Skywing 15y agoYou know what's funny? The company that I work for wrote a web app for a large company and we also host it for them. At one point in time, they requested a way for users to reset their passwords. We implemented it, but they never use it. They prefer to email me their passwords in plain-text. I think I've handled two of these types of emails today, alone!
- mseebach 15y agoSo what are you doing obliging them? "I'm sorry, but we recently reviewed our security practices, and we've found this method of communicating passwords to be incompatible with our dedication to protecting the confidentiality and integrity of your business data. Please use the the password reset form at .. "
- drdaeman 15y agoJust reply them with "oh, we now have an automated service for that" and a link to password reset form. They'll learn, eventually.