I never claimed or assumed that forums are supposed to provide bank level security.

What I am saying is: there is a very simple change that would (if ever so) slightly improve the security of the site, it'd make (at least some) of your users happy, it would take literally a minute to implement, there are no downsides.

Why some users here are complaining about me offering such a suggestion is confounding... especially in a forum regarding software development (we're all here to learn and improve right? not just troll new users?)

Mods/site-owners, any irritation in my posts here is regarding the replies from people. My original post is just a friendly suggestion to improve the site.

Anyway, that's all I'm going to post here.

Everything I use has a different password for just such a reason; and I take all of the precautions I know about and/or reasonably can do without actually disconnecting myself That being said I have no control over the communication channel of the e-mail outbound from the forum server. My communication channel to my server is secure, but the rest of the internet I can't fix

I know most forums are lax in security, but that doesn't mean I'm not going to offer some suggestions when I see an easily-fixed problem. (it should be like a 60 second fix: remove that line from the "user-confirmation" email; save; deploy; done)

I'm not like raging upset or anything was just slightly miffed at seeing the password I just typed displayed to me on my screen (imagine you were typing your password in somewhere, and instead of seeing '●●●●●●●●●' you see '123456789' you'd be probably mildly irritated). I'll say, I was as upset at seeing my password as I would be from having dropped a piece of food I was eating. It's just "aww, man... not cool".

Shane, it's not my e-mail address I'm concerned about, it's the password. IF I used that password for other things (which I don't, but a lot of people do) and someone got a hold of it, they could do some nasty things. My e-mail got broken into a few years ago (before I took more precautions) and it was really annoying to deal with all the fallout from it.

Just signed up for this forum, was annoyed to see that my password was emailed to me in plaintext in the registration mail. Hopefully this isn't being saved in the forum database plaintext...

With the other security measures in place (like the human verification form after clicking on the link in the email) this seems to be a fairly glaring issue.

That being said, thanks for running the forum! Please take this as a friendly suggestion.