Please note that our software distribution system is not a subscription/membership service such as a forum, blog, etc. Our system is exclusive for commercial PixInsight users and members of our development team, and provides full access to installation packages of our software and other sensitive material. We have done our best to build a secure system, where a password remainder/change option would be an unnecessary risk. On the other hand a link to say that "if you have lost your password then email support" would be pointless since all of our users already know that. All commercial PixInsight users receive the data of their user account on our servers, and our support staff are always glad to provide them upon request.
That's a very polite and well worded answer, Juan.
However, first, I disagree with the "pointlessness" of a simple link to email support. Of course when a user is "lost" the solution is to write support, and if you think a one-liner telling the user to write to support is then pointless, I'm not going to try convince you otherwise, but considering the "costs", not adding such simple note, as much as I commend your out-of-the-box thinking Juan, to me it's just obstinate behavior about a very simple usability concept.
As for security, I don't know Juan... I'd rather you work on PixInsight than on implementing a robust automated password recovery system, so please note I am not asking/suggesting you should implement one, but please... I see password recovery options not just in forums and blogs, but also at sites like American Express, VISA, bank or brokerage accounts, etc... sites I think also worry about "unnecessary risks" and the information behind each user's account also qualifies as rather high sensitive data.
They also tend to use https for the logins, while PixInsight does not, so between that and refusing to add a simple "write to us" link, there's some room there for improvement I'd say.
Do note *I* don't need that link, and to me this is a very minor issue, but since it's being discussed, I just let you know what any person who knows even just a bit about usability would tell you.
Refusing to follow that advice (adding a simple link), to me, again, it's not out-of-the-box thinking but considering the "costs", just obstinate behavior, again, about a very simple usability concept.
Still remember, no matter how strong the fortress you may try to build around our commercial accounts here, which is appreciated, in the end it may be only as secure as the security of our email accounts. The Hotmails and what not of the world.
No need to debate this further. You know my opinion and whatever yours is, that's fine.
Cheers!
