[wp-trac] Re: [WordPress Trac] #9710: Add change-password nag for auto-generated passwords

[WordPress Trac]

#9710: Add change-password nag for auto-generated passwords
------------------------------+---------------------------------------------
 Reporter:  DD32              |        Owner:  westi 
     Type:  enhancement       |       Status:  closed
 Priority:  normal            |    Milestone:  2.8   
Component:  Administration    |      Version:  2.8   
 Severity:  normal            |   Resolution:  fixed 
 Keywords:  has-patch commit  |  
------------------------------+---------------------------------------------

Comment(by demetris):

 I will not reopen this but I just want to say that I still disagree, even
 with the message as toned down by Denis.

 The inconsistency is still there:

 On one screen WP recommends (implicitly, by making a random password for
 the user) security over convenience.

 On the next screen it suggests the way of convenience over the way of
 security.

 I believe WP should be able to send a simple and clear message at least at
 this basic level (and before we go into finer UI points which are
 objectively difficult to get right).

 Also, very importantly, this modification is based on the experience of
 the wrong people.  I think I can understand DD32’s inconvenience.  I have
 about 10 test WP installs myself and the random passwords are an
 inconvenience for me too.  For my test installs, I would be happy if WP
 offered me an option right from the start:  Blank password.  :-D

 But that’s not typical usage.  Although I don’t have any stats, I feel
 safe in saying that the typical usage is closer to the other end:

 One user, one WP install, interfacing by means of one or two clients
 (which are pretty good at managing passwords, random or not, anyway).

 And this usage, as far as I know, does not give rise to any complaints
 that would justify modifications in this part of WP.

 I’ll shut up now.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9710#comment:21>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software