Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I keep finding various websites that are able to email me back my password. I try to email them every time, telling them about this. But it can be tricky to be taken seriously - it's just a random email from a random stranger. Besides, I can't really go into much detail or I'll risk being ignored for TL;DR reasons.

This got me thinking: perhaps there is an info-site out there dedicated to first explaining why this is a problem, and then linking to further info on how to do this right? One that looks authoritative and trustworthy, preferably even authored by someone famous in the IT security field?

The closest I found is this blog by Jeff, but it starts off discussing something else altogether, and so isn't very suitable.

share|improve this question
add comment

2 Answers

I would like to point you to this post here on security stack exchange.

However, it would be difficult as a normal user to convince a site to change their password policies unless you are paying for their services. I would just avoid using such sites if at all possible.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.