Menlo Park City Council Email Log

[ Home ] [ City Council ] [ Search ] [ 05/06 Archive ] [ 07/08 Archive ] [ 09/10 Archive ] [ 2011 Archive ] [ 12/13 Archive ] [ Watch City Council Meetings ]

menlopark.org registrations store unencrypted passwords in clear text

From: domainremoved <Dave>
Date: Mon, 28 Dec 2015 20:24:51 -0800

I've tried to email the team in charge of menlopark.org registrations about
this, but nothing has changed.

The user registrations for menlopark.org services are storing passwords in
clear text. When you forget your password it is sent to you in clear text.
You should not store passwords in clear text and you should not send
passwords in emails in clear text. In a world where there has been security
breach after security breach it is wrong to be storing login data like
this. It's almost 2016. Please kindly ask the team in charge of
menlopark.org registrations to update to more secure standards.

Thank you.
Received on Mon Dec 28 2015 - 20:27:54 PST

[ Search ] [ By Date ] [ By Message ] [ By Subject ] [ By Author ]

Email communications sent to the City Council are public records. This site is an archive of emails received by the City Council at its city.council_at_(domainremoved)