Re:154 websites that store your password in plain text
by jbhelms on Sunday June 12, 2011 @08:01PM
(#2647688)
Just because a website can email you your password doesn't mean they store them in plain text. They can store them in a reversible encryption scheme like rijndael.
[ Parent
| on HN ]
Re:154 websites that store your password in plain text
by gregatragenet on Sunday June 12, 2011 @10:13PM
(#2647888)
If a hacker can steal your user database they as-likely-as-not have access to your reversible encryption keys.
On top of that it's bad form to mail a user their plaintext password back to them.. I don't need my password crossing third-party networks and SMTP servers in plaintext.