5 ms·

Tried to signup... it said I already had an account. Did a password reset... it emailed me a new password in cleartext. Clicked on the login link... Bad Gatew

• giuliano84 12y ago
  Hi binary, I got your points. We had a short outage that has been restored in a flash. +90% of our users login with Google so password reset has been developed just to give users the possibility to re-enter and define a new one of their choice.
  • yuvipanda 12y ago
    But does this mean you are storing passwords in cleartext?
    • NicoJuicy 12y ago
      That is not what he said, they send a mail with the new password, so that doesn't mean they store the passwords in plaintext (not cleartext). It just generates a password, mails it and then (probably) encrypts it.
      • yuvipanda 12y ago
        Ah, apologies. Misread. Still could be better, though - with a reset link that then creates a new password.