News for hackers. Stuff that matters.

A comment on AMP: the missing controversy. Parent comment

Re:AMP: the missing controversy by tombrossman on Sunday February 25, 2018 @06:41AM (#16458446)
> In the end I went with Runbox, will see how they perform but I’m happy so far.

I tried Runbox back in 2013 after a fair amount of research and they looked great. After signing up, they sent a confirmation email with all my account info with user-name and password in clear text. I cancelled immediately after seeing this, but I wonder if they are still doing it?

I ended up switching to Fastmail, which I still use and highly recommend.

[ Parent | on HN ]
Re:AMP: the missing controversy by robin_reala on Sunday February 25, 2018 @09:35AM (#16459116)
I didn’t get that this time at least. It’s worth pointing out that while that’s not great, if they send the password before encrypting it for saving in the database and only send it internally to their own mail server then there’s little security risk. But it’s not best practise as it trains users to expect it from other sites.
[ Parent | on HN ]