This was his argument to wit I said that that assumes that the person on the other end of the email is indeed the right person.
 
Adaryl Wakefield
Aviator by passion
Programmer by sheer force of will
----- Original Message -----
Sent: Friday, December 05, 2003 3:49 PM
Subject: RE: [KCFusion]

Depends on how secure your site needs to be.
 
A reasonable middle ground is for users to give their email address, you email them a URL, they click the URL, you ask them to type a password.  Now you know you have a valid email address for them, and they know their password.  (The URL has the effect of the temp password, but feels more convenient to most users.)
 
-glenn
 
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Adaryl Wakefield
Sent: Friday, December 05, 2003 3:48 PM
To: [EMAIL PROTECTED]
Subject: [KCFusion]

The desinger and I are having a discussion about security.
I say that if people want their passwords they have to submit emails and
answers to personal questions then I send them a temp password in email that
they have to change themselves.
He wants to do something more simple like type in your email address and we
just send you your password. I think thats horribly insecure but that is the
way Macromedia works. Opinions?

Adaryl Wakefield
Aviator by passion
Programmer by sheer force of will

Reply via email to