View Single Post
Old May 24th, 2009, 01:43 AM
Mike Mike is offline
Mike King (Troublemaker)
 
Join Date: May 2005
Posts: 3,085
Default

Quote:
Originally Posted by heinz57g View Post
thats the main issue with M2W: they do NOT use or STORE passwords, at all. you have to enter it, for every account, every time anew. it is not recorded or stored anywhere, just passed on to your actual system in real time.
I understand that m2w promises that. However, the password does go through m2w's system, in the clear.

Anytime I'm transmitting a password, I will only do it on a trusted connection, and only directly to the site where it is used. (For example, I won't use a web mail password at a site that doesn't use SSL if I'm not at home.)

Thus, my personal security policy is not to transmit a password to any site except the one that uses it for authentication. So far, none of my accounts anywhere have been compromised.
Reply With Quote