Post in Password Reset
Richard and I were discussing the resetting passwords on the telephone, and we
decided that it makes more sense to send the password reset message to *all*
the users address, not just the one he or she entered. What do others think?