The important thing here is that *you* should not have the list of passowrds. Passwords must be stored as hashes or encrypted. If you are not doing that, there is a problem.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1537/1369#1369