Reset, if you've got Steam Authenticator set up, prompts for Steam Authenticator code. If you don't have that, it prompts to send an SMS, and past that I decided I didn't want to mess up my account so I registered a dummy
Registration captcha is not case sensitive
per #125: reset masks all but first character of email name and each domain component. Length is visible
Registration seems to have a problem with email addresses with plus signs in them
reset submit stub links to login page
password reset also lets you change email address after you submit the password change
I think being logged in for reset lets you skip the request form
Stray observations: