WebHost4Life allows anyone to send an email to their CEO, so I sent one regarding the password strength issue I posted about this morning:
Dear Sir or Madame -
Why doesn't WebHost4Life support strong passwords for their FTP service? Please take a look at this article that I posted this morning:
Link
When I attempted to change my FTP password to a "strong" password that uses non-alphanumeric characters, I received the message saying that I could only use numbers and letters for the password. In this day and age of Internet security I am shocked that WebHost4Life doesn't support stronger passwords and I am concerned for the security of my FTP site. I have friends and colleagues who have had their FTP sites compromised by hackers even with strong passwords.
In addition, passwords are displayed in clear text on your control panel's screens. I've noticed this when changing passwords for email and FTP users. Why aren't the passwords masked so that their value is hidden from the screen? Again, this is a fundamental browser security feature that almost all membership sites use.
I'm considering canceling my account unless you can assure me that steps will be taken soon to address this issue. I've recommended friends and colleagues to your service in the past but will discontinue to do so until these features of your service are secured.
Sincerely,
Mike Hodnick
http://www.kindohm.com
I'm curious to see if I'll actually get a response.