I just joined after using this board for several references and have found it to be very helpful.
However, when I joined, I was sent an email with my username and password included.
I have a suggestion to decrease the possibility of security problems: Is it possible *not* to email the passwords to your new users? I think this can be a security risk, and passwords should customarily be reset when someone forgets them, rather than emailed...
Just a thought, it may help your users security for your site to use this convention, which seems to be the standard for most heavily traveled sites.
Thank you for your consideration.
However, when I joined, I was sent an email with my username and password included.
I have a suggestion to decrease the possibility of security problems: Is it possible *not* to email the passwords to your new users? I think this can be a security risk, and passwords should customarily be reset when someone forgets them, rather than emailed...
Just a thought, it may help your users security for your site to use this convention, which seems to be the standard for most heavily traveled sites.
Thank you for your consideration.
