>When a site insists that certain characters are not allowed in passwords, that is strong indication that they are storing them clear-text in text files.

Except it really isn't, while stupid this is hardly uncommon in software that does hashing.