4 ms·
How is this not identical to sending the user password in the clear via email?
by parsnips 13y ago
How is this not identical to sending the user password in the clear via email?
- zippergz 13y agoFor one thing, it doesn't allow someone who intercepts it to login to all the other sites the user has used that password (or password pattern) on.
- eberfreitas 13y agoI guess it is as good as sending an email with a link to reset a password. In theory, the link that gives you access to your account couldn't be used after X minutes and could be use only once, making it useless for future attempts.