Hackage 2

Ross Paterson ross at soi.city.ac.uk
Thu Sep 6 13:35:37 CEST 2012

The User accounts page, echoing the Hackage 1 version, says "Passwords
are stored encrypted, so if you forget yours we can't recover it, but
will need to assign a new one. Just ask."

But the account registration page doesn't even ask for an email address,
so it would be difficult for administrators to action a request for a
password reset safely.  If you store the email address, an automatic
reset would be feasible, as is common elsewhere.

More information about the cabal-devel mailing list