Hi. After registering to this site (to be able to post in the forum), I received a confirmation email, which contained my password in CLEAR TEXT. Please allow me to remark that I don't consider this to be best security practice, since emails are transmitted unencrypted through an unpredictable route of multiple servers, plus it makes me worrying that userpasswords probably are being stored unhashed in your systems, then. Am I right?

Thanks for having a look into this subject, as it might be a potential security issue with your site, potentially affecting all registered users, especially in case of password re-use on other sites, or in case of logging in to your site while using a public wi-fi and/or not using SSL when logging into your site.

Thanks.

 

Thanks for directing me to that "Community Voice" page. I didn't see it yet, and it's a great thing:) Of course I voted for that topic too (and through a comment also suggested to add cookie encryption as being the default too).