Hey!
So I just registered and I'm already concerned, before I've even opened the game.
The registration email which I received contained not only my username, but also my password in plaintext. I'm not sure about others, but I don't want to have my mailbox full of emails containing my passwords.
I presume this also means that the password is stored as plaintext, is that correct?
And if so, can you please fix that? A simple hash check (say, bcrypt) is really easy to implement and will protect our accounts much better in a world where user account databases are being stolen regularly.
(Not sure whether this goes into Feedback or Bugs, but I consider it to be a major issue, so Bugs it is)
So I just registered and I'm already concerned, before I've even opened the game.
The registration email which I received contained not only my username, but also my password in plaintext. I'm not sure about others, but I don't want to have my mailbox full of emails containing my passwords.
I presume this also means that the password is stored as plaintext, is that correct?
And if so, can you please fix that? A simple hash check (say, bcrypt) is really easy to implement and will protect our accounts much better in a world where user account databases are being stolen regularly.
(Not sure whether this goes into Feedback or Bugs, but I consider it to be a major issue, so Bugs it is)
The post was edited 1 time, last by Dex ().