<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-gb">
<link rel="self" type="application/atom+xml" href="https://forum.yubico.com/feed.php?f=4&amp;t=1028" />

<title>Yubico Forum</title>
<subtitle>...visit our web-store at</subtitle>
<link href="https://forum.yubico.com/index.php" />
<updated>2013-04-08T09:12:01+01:00</updated>

<author><name><![CDATA[Yubico Forum]]></name></author>
<id>https://forum.yubico.com/feed.php?f=4&amp;t=1028</id>
<entry>
<author><name><![CDATA[Tom]]></name></author>
<updated>2013-04-08T09:12:01+01:00</updated>
<published>2013-04-08T09:12:01+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=1028&amp;p=3871#p3871</id>
<link href="https://forum.yubico.com/viewtopic.php?t=1028&amp;p=3871#p3871"/>
<title type="html"><![CDATA[Re: [SECURITY] Yubico.com sends out Plain Text Passwords]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=1028&amp;p=3871#p3871"><![CDATA[
Dear Alexanderpas,<br /><br />Thank you. It is in our road-map to undertake the necessary steps to address this.<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=2195">Tom</a> — Mon Apr 08, 2013 9:12 am</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[alexanderpas]]></name></author>
<updated>2013-04-07T18:00:58+01:00</updated>
<published>2013-04-07T18:00:58+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=1028&amp;p=3869#p3869</id>
<link href="https://forum.yubico.com/viewtopic.php?t=1028&amp;p=3869#p3869"/>
<title type="html"><![CDATA[[SECURITY] Yubico.com sends out Plain Text Passwords]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=1028&amp;p=3869#p3869"><![CDATA[
Yubico.com is <a href="http://plaintextoffenders.com/post/47268058177/yubico-com-hardware-based-authentication-yubico" class="postlink">featured on Plain Text Offenders</a> because it sends out passwords in plain text.<br /><br />The reason why this is unsafe is explained in the article <a href="http://plaintextoffenders.com/post/7006690494/whats-so-wrong-about-sending-a-new-password-in" class="postlink">What's so wrong about sending a new password in plaintext?</a><p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=667">alexanderpas</a> — Sun Apr 07, 2013 6:00 pm</p><hr />
]]></content>
</entry>
</feed>