Re^2: Monastery login over http

[Your Mother]

Doesn't scare me in the slightest and never did. The site doesn't have my social security or any banking or credit or non-public personal info or keychain access or certs to anywhere and does not represent any security threat at all unless I use the same credentials and password elsewhere. I've done a lot of stupid things in my day but not that one. Though I was able to skate on a five letter dictionary word as my amazon.com password for a few years… :P

[LanX]

The best strategy here is a generated cryptic password.

I don't need it to be easily remembered as long as I can get it mailed.

[Your Mother]

I started using GUIDs (with a very minor transform) as my default password at new sites a couple years ago.