carbonize wrote:
Whilst I do think storing passwords in plaintext is one of the stupidest things any web dev can do that entire website is based on the premise of someone getting hold of your emails If someone has got access to your emails it makes no difference if they send your email in plaintext or not since reset emails will also be sent to that address.
There is a small difference as, if someone gains access to your email, they can request your passwords from sites like that and get your password without you knowing. For sites that reset your password, they'd need to change it, which may alert you to someone messing with it. A small difference, but a difference.