Re: Encryption/Decryption on both Java and Delphi

Igor Planinc wrote:

> I'll take a wild guess, but that's a common practice with various
> web-based services. They usually have the "Forgot your password? No
> problem! We'll send it to you." option

Sounds likely, but it's not good practise. Better is to generate a new
password and send that. Better still is to generate a new /one-shot/ password
which the user has to change immediately. I'm sure there are better ideas
still, but I haven't seen them myself.

-- chris


.