I keep finding various websites that are able to email me back my password. I try to email them every time, telling them about this. But it can be tricky to be taken seriously - it's just a random email from a random stranger. Besides, I can't really go into much detail or I'll risk being ignored for TL;DR reasons.
This got me thinking: perhaps there is an info-site out there dedicated to first explaining why this is a problem, and then linking to further info on how to do this right? One that looks authoritative and trustworthy, preferably even authored by someone famous in the IT security field?
The closest I found is this blog by Jeff, but it starts off discussing something else altogether, and so isn't very suitable.