I was wondering what the pros and cons are about sending an email with the password to a user registering on a website (like wordpress.org does).
They use pretty good passwords (12 characters long with uppercase and lowercase letters, numbers and symbols). Now, assuming that the passwords are secure enough, why would someone decide to use this approach versus the traditional one (letting the users decide their own passwords)?
The first thing that comes to my mind is that, by doing this, you avoid the use of weak passwords upon registration, thus increasing security, but then allowing the user to change the password would make all this useless.
The second thing I can think of is that you could avoid the risk of credentials sent in the clear during the registration process, if the website doesn't support HTTPS. But then again, if a website cares so much about the user's security, I assume that it probably has HTTPS support too.
Is there something I am forgetting?
And to make the question more suited to this website: do you think that creating strong random password and then emailing them to the users is a good idea?