[mba] Update - Secure Passwords and the Renaissance Contest Website

MN Brewers, I just talked to Ryan about his concerns regarding the Renaissance Contest website. Like Ryan, we are all concerned about the security of people's passwords. Based on his input, we made a small change to our process. I appreciate Ryan bringing this up and sharing his concerns! Here's a few very important clarifications about Secure passwords and the Renaissance Contest website. The system provides secure storage of passwords in MD5 encrypted format. Your password is NOT in danger of being hacked / stolen / misplaced! The Drupal community provides timely security updates for Drupal websites, that's why we are using it. The site is up to date with all security fixes in place. As part of the registration process, we WERE emailing account credentials back to participants. As Ryan stated (and I completely agree), this is NOT secure. We have changed the emails so that the site is no longer sending the password in the registration email. I also agree with Ryan about passwords - don't use the same password for all your accounts! If you have concerns about your password on the site, it's very easy to change it. Just log into the website, and visit the account page: http://www.rennfestbeercup.com/user Click the edit tab and update your password. If you have concerns about the security of the site, feel free to contact me via email or phone: Wilbur Ince 651.488.6112 Byggvir's Big Beer Cup Webmaster On 09/12/2011 01:32 PM, Ryan Sinn wrote: