registration e-mail

Got something on your mind about the project? This is the correct place for that.


Forum rules

This forum is for feature requests, content changes additions, anything not a Bug in the software.
Please report all bugs on the Support Forums

Post Reply
User avatar
Cosmostrator
Novice
Novice
Posts: 132
Joined: 23 Aug 2006, 06:13
Location: USA - So. Cal

registration e-mail

Post by Cosmostrator »

A suggestion for better security on the forums. When I registered the comfirmation e-mail had both my username and password in plain text. This seems like it would be something too easy to exploit. I would prefer not to recieve my password at all.
Thanks for making a great game.
-DAVe
User avatar
ElvenProgrammer
Founder
Founder
Posts: 2526
Joined: 13 Apr 2004, 19:11
Location: Italy
Contact:

Post by ElvenProgrammer »

Unfortunately phpBB does not seem to support this feature yet.
User avatar
Crush
TMW Adviser
TMW Adviser
Posts: 8046
Joined: 25 Aug 2005, 16:08
Location: Germany

Post by Crush »

in my opinion all automatic registration services should have an optional box to paste a public pgp key so one can receive all automatic emails encrypted.

too bad that pgp doesn't get wide acceptance. it is a really useful technology.
  • former Manasource Programmer
  • former TMW Pixel artist
  • NOT a game master

Please do not send me any inquiries regarding player accounts on TMW.


You might have heard a certain rumor about me. This rumor is completely false. You might also have heard the other rumor about me. This rumor is 100% accurate.
User avatar
Platyna
Grand Knight
Grand Knight
Posts: 2215
Joined: 19 Nov 2005, 13:19
Location: Poland
Contact:

Post by Platyna »

Actually PGP is pointless if you use encrypted SMTP negotation on both sides. About plain passwords, forums are generally not meant as a secure software, same as majority of web applications, so it is good to use different passwords for any of them, and to use some temporary passwords while registering.

Regards.
User avatar
Crush
TMW Adviser
TMW Adviser
Posts: 8046
Joined: 25 Aug 2005, 16:08
Location: Germany

Post by Crush »

Platyna wrote:Actually PGP is pointless if you use encrypted SMTP negotation on both sides.
encrypted transfer of the emails doesn't protect you from security flaws or indiscretion on the side of your email provider.
  • former Manasource Programmer
  • former TMW Pixel artist
  • NOT a game master

Please do not send me any inquiries regarding player accounts on TMW.


You might have heard a certain rumor about me. This rumor is completely false. You might also have heard the other rumor about me. This rumor is 100% accurate.
User avatar
Platyna
Grand Knight
Grand Knight
Posts: 2215
Joined: 19 Nov 2005, 13:19
Location: Poland
Contact:

Post by Platyna »

Actually you can use a cannon to kill a fly, but would you?

Regards.
Post Reply