Comment 3 for bug 783392

Revision history for this message
Henrik Nilsen Omma (henrik) wrote :

I agree that sending passwords in plain text email is not ideal but as Neil says we have limited control over this. The application system is powered by a SaaS application called Taleo and while we can adjust certain aspects of it through configuration we cannot change this part ourselves. We do however file issues with them and will do that now with this bug. FWIW the default configuration of Taleo also tells you your password unpromted at the end of the initial application process in large, red, plain text right in your browser window. We were able to switch that off and have alerted Taleo to the problems that represents.

As admins on the recruiting site back-end we do not have access to passwords and cannot even reset them. We rely on Taleo to keep this information secure through the contract we have with them.