Password is sent by email after registering with ospc.org

[MaxGhenis]

After registering with ospc.org, I got a confirmation email including my username and password. Sending passwords by email is a security risk; see http://plaintextoffenders.com/faq/devs

[martinholmer]

@PeterDSteinberg and @brittainhard,
What's your view on this comment (#571) from a new TaxBrain user?

@MaxGhenis said:

After registering with ospc.org, I got a confirmation email including my username and password. Sending passwords by email is a security risk; see http://plaintextoffenders.com/faq/devs

It seems like the way things work now is not very safe.
Shouldn't this be changed?

@MattHJensen @GoFroggyRun

[MattHJensen]

We do not currently provide any additional functionality for logged in users. I suggest resolving this issue by hiding/removing the signup/login capability.

[MaxGhenis]

The docs page (https://www.ospc.org/docs/) suggests registering for the mailing list (https://list.ospc.org/mailman/listinfo/users_list.ospc.org). Should that be removed?

[MattHJensen]

The docs page (https://www.ospc.org/docs/) suggests registering for the mailing list (https://list.ospc.org/mailman/listinfo/users_list.ospc.org). Should that be removed?

Yes. That never took off.

so this issue requires:

• remove suggestion to register for mailing list
• hide signup/login capability until security risk is resolved and we actually use signup for something.