It seems after the initial signup the server responds with with the question/answer form and pre-populates hidden fields with my entered password in the clear, which kind of make me wonder how my password is stored. Im hoping my password isn't stored like this and they are just passing it back as a response param, or perhaps the initial signup isn't hitting the server at all??
Comments
Im more worried why they are using my password in hidden form fields in the clear on signup.
http://dl.dropbox.com/u/12035718/after-signup-source.jpg
It seems after the initial signup the server responds with with the question/answer form and pre-populates hidden fields with my entered password in the clear, which kind of make me wonder how my password is stored. Im hoping my password isn't stored like this and they are just passing it back as a response param, or perhaps the initial signup isn't hitting the server at all??