2019-05-01, 09:46 AM
(2019-04-30, 07:05 PM)michael@belgium Wrote:Quote:If any website emails your password back in plain text, then he is surely storing your password as such
Not really.?You can't know that. You could just hash a temporary plain password, save it in the database, and send the plain pass to the user
I think the key word there is "your". It is perfectly fine to send a random temporary password, not the user's original password.