registration e-mail

Got something on your mind about the project? This is the correct place for that.
Forum rules
This forum is for feature requests, content changes additions, anything not a Bug in the software.
Please report all bugs on the Support Forums
Post Reply
User avatar
Cosmostrator
Novice
Novice
Posts: 132
Joined: 23 Aug 2006, 07:13
Location: USA - So. Cal

registration e-mail

Post by Cosmostrator » 23 Aug 2006, 07:37

A suggestion for better security on the forums. When I registered the comfirmation e-mail had both my username and password in plain text. This seems like it would be something too easy to exploit. I would prefer not to recieve my password at all.
Thanks for making a great game.
-DAVe
User avatar
ElvenProgrammer
TMW Adviser
TMW Adviser
Posts: 2526
Joined: 13 Apr 2004, 20:11
Location: Italy
Contact:

Post by ElvenProgrammer » 23 Aug 2006, 08:10

Unfortunately phpBB does not seem to support this feature yet.
User avatar
Crush
TMW Adviser
TMW Adviser
Posts: 8046
Joined: 25 Aug 2005, 17:08
Location: Germany

Post by Crush » 23 Aug 2006, 13:05

in my opinion all automatic registration services should have an optional box to paste a public pgp key so one can receive all automatic emails encrypted.

too bad that pgp doesn't get wide acceptance. it is a really useful technology.
  • former Manasource Programmer
  • former TMW Pixel artist
  • NOT a game master

Please do not send me any inquiries regarding player accounts on TMW.


You might have heard a certain rumor about me. This rumor is completely false. You might also have heard the other rumor about me. This rumor is 100% accurate.
User avatar
Platyna
Former Dictator
Former Dictator
Posts: 2213
Joined: 19 Nov 2005, 14:19
Location: Poland
Contact:

Post by Platyna » 28 Aug 2006, 20:38

Actually PGP is pointless if you use encrypted SMTP negotation on both sides. About plain passwords, forums are generally not meant as a secure software, same as majority of web applications, so it is good to use different passwords for any of them, and to use some temporary passwords while registering.

Regards.
Zuzanna K. Filutowska
[The rest of this signature was censored by TMWC's "Freedom" and "Free speech".]
User avatar
Crush
TMW Adviser
TMW Adviser
Posts: 8046
Joined: 25 Aug 2005, 17:08
Location: Germany

Post by Crush » 28 Aug 2006, 20:44

Platyna wrote:Actually PGP is pointless if you use encrypted SMTP negotation on both sides.
encrypted transfer of the emails doesn't protect you from security flaws or indiscretion on the side of your email provider.
  • former Manasource Programmer
  • former TMW Pixel artist
  • NOT a game master

Please do not send me any inquiries regarding player accounts on TMW.


You might have heard a certain rumor about me. This rumor is completely false. You might also have heard the other rumor about me. This rumor is 100% accurate.
User avatar
Platyna
Former Dictator
Former Dictator
Posts: 2213
Joined: 19 Nov 2005, 14:19
Location: Poland
Contact:

Post by Platyna » 28 Aug 2006, 20:53

Actually you can use a cannon to kill a fly, but would you?

Regards.
Zuzanna K. Filutowska
[The rest of this signature was censored by TMWC's "Freedom" and "Free speech".]
Post Reply