On 7/31/2012 9:08, Zeger Knaepen wrote:
> sure, why not, add all the security of a password, and then send me my login
> and password through an unsecure unencrypted email.. way to go!

FWIW, this is actually pretty surprisingly secure. The folks who want to 
steal such passwords don't really have access to that information.

Evidence: In all the time running our email-based payment service, exactly 
one time did someone get their password stolen. And that was when their 
estranged husband was the administrator for their home unix box.

-- 
Darren New, San Diego CA, USA (PST)
   "Oh no! We're out of code juice!"
   "Don't panic. There's beans and filters
    in the cabinet."

Post a reply to this message