quote:
Originally posted by EvilSeph
Well SB, I apologise if I'm wrong, but I was informed otherwise..
^^
Edit: Well, that tells me they were, which I'm glad has changed. But I'm still going to be cautious.
Let me clarify further. Passwords are not stored on the mailserver in plaintext, they are encrypted using md5, and Sean never even had access to the md5 hashes. Through the GUI I gave him, it is only possible to change a password.
Regarding the signup script, new accounts displayed password before activation; existing ones were not and are not accessible. There were only a small number of accounts activated by Sean. Regardless, if you would like to change your password, you are free to do so.