[TYPO3-dev] TYPO3.org Login: Forgot your password mechanism

Ingmar Schlecht ingmar at typo3.org
Sun Nov 30 13:27:16 CET 2008


Hi Ries,

ries van Twisk wrote:
> 
> On Nov 30, 2008, at 7:00 AM, Ingmar Schlecht wrote:
> 
>> Xavier Perseguers wrote:
>>> Hi,
>>>
>>>> thanks for your feedback.
>>>>
>>>> The issue is already known and being worked on.
>>>
>>> Waaaaah! Christoph was right? I cannot believe it!
>>
>> Yes, but it's only temporary. Also, it is not insecure, it just offers
>> an easy way of annoying people by requesting new passwords for them a
>> lot of times.
> 
> I am sorry Ingo,

Ingmar, not Ingo :)

> why do you think the offered method was secure?
> 
> Requesting a other users password as I read and understand it from
> Christoph sounds pretty much insecure to me.

OK, this is a misunderstanding. I just saw you read my other mail and
understood the issue.

cheers
Ingmar


-- 
Ingmar Schlecht
TYPO3 Association Active Member




More information about the TYPO3-dev mailing list