Mike McGrath wrote:
> So the password reset generally went off without a hitch but a lot of
> people forgot to reset their password or just plain didn't and I'm
> wondering if it's because of where I sent the notifications to so I
> thought I'd ask. Would you generally like password reset requests to go
> to:
>
> username@xxxxxxxxxxxxxxxxx (the alias that directs to your email addr)
>
> the email address we have listed
>
> or both?
Why don't we stop requiring these pointless password resets altogether? I
can understand being asked to change the password if there was some leakage
like the recent wiki log issue, but expiring the password just because it's
old makes no sense whatsoever.
Kevin Kofler
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
