I have an issue with DNN. I *hate* that any DNN site I sign up to means that immediately anyone on that site who can access the email data have access to my password. Them and every other relay server between that site and my email provider.
WHY was this decided to be the right way to go about it? And why is it such a pain in the arse to disable? (and by disable I mean go into the language editor, find the correct field, and change the resource setting for the outgoing email).
It's not even that it's a pain to do on my own site that is the problem. With more DNN installs getting out there every day, I'm more and more likely to be registering on one as time goes on... And I really doubt that they will bother changing the settings to not broadcast my password out to the world.
What makes it worse is that you aren't warned beforehand. I have several 'general use' passwords that I use, for example, a 'ultra-mega-hyper-secure-6000' one that is a right prick to remember, all the way down to 'use my name, with 0 instead of o, because I don't give a rats if someone wants to use my account on this server'. If I go to a site with a shopping card that I'm happy to store my delivery/credit card info, I'll put in my umhs6k password... And if, a few minutes after registering, I receive confirmation that my umhs6k password has been spread to the internet at large, I'm not a very happy chappy, as you might expect. I've taken to signing on with the '0-o' password and switching to one of my umhs ones after deciding it's 'safe enough'.
Did someone request this 'feature' at some point? Was there a concious decision that people would enter their password, then instantly forget it, so it would be best to let it rot in their inbox? People like that would either have some secure password management system (ie c:\passwords.txt) or not care, registering for a one-off download, for example.
So yeah. Not very happy with this 'bug'. People requesting their passwords from servers is one thing (the 'password reset' I think is better)...
I'm surprised noones complained bitterly about it in the past. Like, a few days after DNN alpha 0.01 was released.
/end vent/rant
Shrug.
BTW, I think DNN is great, keep up the good work ppl :)