[thelist] changing password design

[Marek Kilimajer]

Tony Crockford wrote:

> usual approach to this is to store another secret (or two) such as pet's 
> name, mothers maiden name etc which they are required to enter to get a 
> new password; even a user generated question and answer pair if needed - 
> what's my favorite food - brussel sprouts

It is the same as using these kind of information for password. So you 
can tell the users to use it for password right away. Not very secure.