57 votesEvgeny Zaritovskiy responded
Please review our current proposal: https://docs.google.com/presentation/d/123zVAgAcSLQb02vC6v8zj-6qoEAEW56cJ-3ioqv5WEc/pub?start=false&loop=false&delayms=3000
Hopefully it will be in the 2011 roadmap. Our blogs are private so feedburner is not a workaround.
A subscription choice just like the forums would be great, would make the look and feel more consistent too.
Is there enforcement of minimum password length? I see no indication of this.
I would expect that a minimum password length be enforced and preferably checked for common bad passwords (e.g. abc123 ). Configurable length would be nice, but a global minimum length of like 8 chars would help.
Is there an automatic lockout for repeated failed login attempts? I can't tell, but if there is it would ease my mind. If so, after how many?
I understand the concern if members are sharing accounts to avoid paying.
That concern does not impact us at all. It's just not an issue. This would be a major inconvienience for reasons previously sited. Also, I currently log in as a regular member and admin on the same machine so I can test my changes and see exactly what regular members will see. If I had access to a different machine (e.g. a Mac) I would login and test there as well.
If you do impliment this feature:
1. please make it optional
2. With IP tracking an issue, consider just kicking off current users when a new login under the same name occurs. Again, please make it optional