I would do assigned, given only those two choices. When you let people pick, a LOT
of them choose "password" as their password. Another large percentage choose
"qwerty", etc. Those accounts will eventually get compromised, then you have
to choose between allowing in all the free loaders ripping your site, or shutting off
the compromised account and emailing the member a new password, which is
inconvenient for them.
The ideal, I suppose, would be to let the user pick, but not allow them to pick dumb
passwords like "password". I don't knwo yet whether something like that could
be cleanly integrated with NATS. We make consider building such a tool which
integrates with NATS if possible.
__________________
For historical display only. This information is not current:
support@bettercgi.com ICQ 7208627
Strongbox - The next generation in site security
Throttlebox - The next generation in bandwidth control
Clonebox - Backup and disaster recovery on steroids
|