Why does the ASP.net administrative site send your plaintext password to you in email whenever you change it? This strikes me as a bad idea. For that matter, why doesn’t the ASP.net site use https on the page that allows you to change your password...